CVE-2026-0606: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /FrontEnd/Albums.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now...

EUVD-2007-4420

Malware in sbrugna...

MyBB Profile Albums Plugin 0.9 (albums.php, album parameter) - SQL Injection

No description provided by source. Exploit Title: Profile Albums MyBB plugin SQL Injection 0day Google Dork: inurl:albums.php intext:powered by Mybb Date: 14.10.2012 Exploit Author: Zixem Software Link: http://mods.mybb.com/view/profilealbums Version: 0.9 Tested on: Linux...

MyBB Profile Albums Plugin 0.9 - 'albums.php?album' SQL Injection

Exploit Title: Profile Albums MyBB plugin SQL Injection 0day Google Dork: inurl:albums.php intext:"powered by Mybb" Date: 14.10.2012 Exploit Author: Zixem Software Link: http://mods.mybb.com/view/profilealbums Version: 0.9 Tested on: Linux. ---------------------------------------------- The...

CVE-2008-5921

The CVE-2008-5921 entry describes an SQL injection in the Umer Inc Songs Portal, specifically in albums.php where the id parameter enables remote SQL command execution. The vulnerability stems from improper input handling in the affected component, enabling an attacker to manipulate queries. The ...

CVE-2008-5921: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in albums.php in Umer Inc Songs Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

Umer Inc Songs Portal Script SQL Injection

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

CVE-2008-2817

SQL injection vulnerability in albums.php in NiTrO Web Gallery 1.4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the CatId parameter in a show action...

CVE-2008-2817

NiTrO Web Gallery 1.4.3 and earlier contains a SQL injection in albums.php (CatId parameter in a show action) that allows remote attackers to execute arbitrary SQL commands. The issue arises from inadequate sanitization of CatId, enabling potentially unauthorized data access or manipulation. No r...

CVE-2008-2817: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in albums.php in NiTrO Web Gallery 1.4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the CatId parameter in a show action...

NiTrO Web Gallery <= 1.4.3 (section) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability NiTrO Web Gallery V1.3 - V1.4- V1.41 - 1.42 - V1.43 albums.php section AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : NiTrO Web Gallery Versions : V1.3 - V1....

nitrowebgal-sql.txt

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability NiTrO Web Gallery V1.3 - V1.4- V1.41 - 1.42 - V1.43 albums.php section AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : NiTrO Web Gallery Versions : V1.3 - V1.4- V1.41 - V1.42 - V1.43 Site :...

Nitro Web Gallery 1.4.3 - 'section' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability NiTrO Web Gallery V1.3 - V1.4- V1.41 - 1.42 - V1.43 albums.php section AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : NiTrO Web Gallery Versions : V1.3 - V1.4- V1.41 - V1.42 - V1.43 Site :...

Sql injection

SQL injection vulnerability in albums.php in Ace Image Hosting Script allows remote authenticated users to execute arbitrary SQL commands via the id parameter in editalbum mode...

CVE-2007-6393

CVE-2007-6393 describes an SQL injection in the Ace Image Hosting Script, in albums.php, via the id parameter in editalbum mode. The vulnerability allows remote authenticated users to execute arbitrary SQL commands. Impact indicators in the source data show partial impact to confidentiality, inte...

CVE-2007-6393: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in albums.php in Ace Image Hosting Script allows remote authenticated users to execute arbitrary SQL commands via the id parameter in editalbum mode...

CVE-2007-4437

SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to execute arbitrary SQL commands via the match parameter. NOTE: some details are obtained from third party information...

Sql injection

SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to execute arbitrary SQL commands via the match parameter. NOTE: some details are obtained from third party information...

CVE-2007-4437

SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to execute arbitrary SQL commands via the match parameter. NOTE: some details are obtained from third party information...

CVE-2007-4437

SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to execute arbitrary SQL commands via the match parameter. NOTE: some details are obtained from third party information...