Lucene search
K

17 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2007-4420

Malware in sbrugna...

6.8CVSS6.2AI score0.01073EPSS
Exploits0References10
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.39 views

MyBB Profile Albums Plugin 0.9 (albums.php, album parameter) - SQL Injection

No description provided by source. Exploit Title: Profile Albums MyBB plugin SQL Injection 0day Google Dork: inurl:albums.php intext:powered by Mybb Date: 14.10.2012 Exploit Author: Zixem Software Link: http://mods.mybb.com/view/profilealbums Version: 0.9 Tested on: Linux...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2012/10/16 12:0 a.m.34 views

MyBB Profile Albums Plugin 0.9 - 'albums.php?album' SQL Injection

Exploit Title: Profile Albums MyBB plugin SQL Injection 0day Google Dork: inurl:albums.php intext:"powered by Mybb" Date: 14.10.2012 Exploit Author: Zixem Software Link: http://mods.mybb.com/view/profilealbums Version: 0.9 Tested on: Linux. ---------------------------------------------- The...

7AI score
Exploits0
CVE
CVE
added 2009/01/21 6:0 p.m.37 views

CVE-2008-5921

The CVE-2008-5921 entry describes an SQL injection in the Umer Inc Songs Portal, specifically in albums.php where the id parameter enables remote SQL command execution. The vulnerability stems from improper input handling in the affected component, enabling an attacker to manipulate queries. The ...

7.5CVSS8.7AI score0.00414EPSS
Exploits1References4Affected Software1
Packet Storm
Packet Storm
added 2008/12/12 12:0 a.m.26 views

Umer Inc Songs Portal Script SQL Injection

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

0.8AI score
Exploits0
ATTACKERKB
ATTACKERKB
added 2008/06/23 5:41 p.m.2 views

CVE-2008-2817

SQL injection vulnerability in albums.php in NiTrO Web Gallery 1.4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the CatId parameter in a show action...

7.5CVSS6.4AI score0.00462EPSS
Exploits1References4
CVE
CVE
added 2008/06/23 5:0 p.m.39 views

CVE-2008-2817

NiTrO Web Gallery 1.4.3 and earlier contains a SQL injection in albums.php (CatId parameter in a show action) that allows remote attackers to execute arbitrary SQL commands. The issue arises from inadequate sanitization of CatId, enabling potentially unauthorized data access or manipulation. No r...

7.5CVSS8.4AI score0.00462EPSS
Exploits1References3Affected Software1
seebug.org
seebug.org
added 2008/06/18 12:0 a.m.37 views

NiTrO Web Gallery <= 1.4.3 (section) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability NiTrO Web Gallery V1.3 - V1.4- V1.41 - 1.42 - V1.43 albums.php section AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : NiTrO Web Gallery Versions : V1.3 - V1....

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2008/06/16 12:0 a.m.32 views

nitrowebgal-sql.txt

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability NiTrO Web Gallery V1.3 - V1.4- V1.41 - 1.42 - V1.43 albums.php section AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : NiTrO Web Gallery Versions : V1.3 - V1.4- V1.41 - V1.42 - V1.43 Site :...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2008/06/16 12:0 a.m.52 views

Nitro Web Gallery 1.4.3 - 'section' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability NiTrO Web Gallery V1.3 - V1.4- V1.41 - 1.42 - V1.43 albums.php section AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : NiTrO Web Gallery Versions : V1.3 - V1.4- V1.41 - V1.42 - V1.43 Site :...

7.4AI score
Exploits0
Prion
Prion
added 2007/12/17 6:46 p.m.7 views

Sql injection

SQL injection vulnerability in albums.php in Ace Image Hosting Script allows remote authenticated users to execute arbitrary SQL commands via the id parameter in editalbum mode...

6.5CVSS8.6AI score0.00414EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2007/12/17 6:0 p.m.43 views

CVE-2007-6393

CVE-2007-6393 describes an SQL injection in the Ace Image Hosting Script, in albums.php, via the id parameter in editalbum mode. The vulnerability allows remote authenticated users to execute arbitrary SQL commands. Impact indicators in the source data show partial impact to confidentiality, inte...

6.5CVSS7.9AI score0.00414EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2007/08/20 10:17 p.m.13 views

CVE-2007-4437

SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to execute arbitrary SQL commands via the match parameter. NOTE: some details are obtained from third party information...

6.8CVSS8.2AI score0.01073EPSS
Exploits0References8
UbuntuCve
UbuntuCve
added 2007/08/20 10:17 p.m.16 views

CVE-2007-4437

SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to execute arbitrary SQL commands via the match parameter. NOTE: some details are obtained from third party information...

6.8CVSS6.2AI score0.01073EPSS
Exploits0References1
Prion
Prion
added 2007/08/20 10:17 p.m.10 views

Sql injection

SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to execute arbitrary SQL commands via the match parameter. NOTE: some details are obtained from third party information...

6.8CVSS8.6AI score0.01073EPSS
Exploits0References8Affected Software1
Cvelist
Cvelist
added 2007/08/20 10:0 p.m.17 views

CVE-2007-4437

SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to execute arbitrary SQL commands via the match parameter. NOTE: some details are obtained from third party information...

8.2AI score0.01073EPSS
Exploits0References8
CVE
CVE
added 2007/08/20 10:0 p.m.60 views

CVE-2007-4437

Ampache is affected up to versions prior to 3.3.3.5, where the match parameter in albums.php is not properly sanitized, enabling SQL injection. This could allow a remote attacker to execute arbitrary SQL commands. The advisories consistently recommend upgrading to Ampache 3.3.3.5 or newer as the ...

6.8CVSS8.1AI score0.01073EPSS
Exploits0References8Affected Software1
Rows per page
Query Builder