Sql injection

Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow remote attackers to execute arbitrary SQL commands via the u parameter in a 1 app0 or 2 app1 action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2012-4925

CVE-2012-4925 describes multiple SQL injection vulnerabilities in Img Pals Photo Host 1.0, triggered via the u parameter in approve.php when performing app0 or app1 actions. The issue allows remote attackers to execute arbitrary SQL commands. The CVSSv2 score is 7.5 (HIGH) with network attack vec...

CVE-2012-4926

approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the activation of administrators via the u parameter in an 1 app0 disable or 2 app1 enable action...

CVE-2012-4925: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow remote attackers to execute arbitrary SQL commands via the u parameter in a 1 app0 or 2 app1 action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

PT-2012-5660

Name of the Vulnerable Software and Affected Versions Img Pals Photo Host version 1.0 Description The issue concerns SQL injection vulnerabilities in the approve.php file. Remote attackers can execute arbitrary SQL commands via the u parameter in certain actions, specifically in 1 app0 or 2 app1...

PT-2012-5661

Name of the Vulnerable Software and Affected Versions Img Pals Photo Host version 1.0 Description The issue concerns a lack of authentication for requests in the approve.php file, allowing remote attackers to modify administrator activation status. This can be achieved by manipulating the u...

CVE-2012-4926: Improper Authentication

approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the activation of administrators via the u parameter in an 1 app0 disable or 2 app1 enable action...