EUVD-2009-3349

Malware in sbrugna...

CVE-2009-3367

Multiple cross-site scripting XSS vulnerabilities in An image gallery 1.0 allow remote attackers to inject arbitrary web script or HTML via the path parameter to 1 index.php and 2 main.php, and the 3 show parameter to main.php. NOTE: the provenance of this information is unknown; the details are...

CVE-2009-3367

CVE-2009-3367 affects the web application “An Image Gallery” <= 1.0, with multiple XSS vulnerabilities in PHP entry points. The issue allows remote attackers to inject arbitrary scripts/HTML through the path parameter to index.php and main.php, and through the show parameter to main.php. The s...

CVE-2009-3367: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in An image gallery 1.0 allow remote attackers to inject arbitrary web script or HTML via the path parameter to 1 index.php and 2 main.php, and the 3 show parameter to main.php. NOTE: the provenance of this information is unknown; the details are...

CVE-2009-3366: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in navigation.php in An image gallery 1.0 allows remote attackers to list arbitrary directories via a .. dot dot in the path parameter...

An image Gallery 1.0 - navigation.php Local Directory Traversal

An image Gallery 1.0 - navigation.php Local Directory Traversal ------------------------------------------------------------------------- An image gallery 1.0navigation.php Local Directory Traversal ------------------------------------------------------------------------- Author : ThE g0bL!N...