5 matches found
CVE-2008-6086
SQL injection vulnerability in album.php in Camera Life 2.6.2b4 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-3355...
CVE-2008-6087
Cross-site scripting XSS vulnerability in topic.php in Camera Life 2.6.2b4 allows remote attackers to inject arbitrary web script or HTML via the name parameter...
Camera Life 2.6.2b4 - SQL Injection Cross-Site Scripting
Camera Life 2.6.2b4 - SQL Injection Cross-Site Scripting Cameralife 2.6.2b4 SQL/XSS Multiple Remote Vulnerabilities Script:Cameralife 2.6.2b4 Download:http://nchc.dl.sourceforge.net/sourceforge/fdcl/cameralife-2.6.2b4.zip Author:BackDoor Bug 1;album.php Remote SQL Injection Vulnerability...
CVE-2008-4366
CVE-2008-4366 is an unrestricted file upload in the image upload component of Camera Life 2.6.2b4. According to the connected documents, remote authenticated users can upload a file with an executable extension and then access it via a direct URL under images/photos/upload, potentially executing ...
Camera Life 2.6.2b4 Arbitrary File Upload Vulnerability
Exploit for unknown platform in category web applications ======================================================= Camera Life 2.6.2b4 Arbitrary File Upload Vulnerability ======================================================= + CameraLife-2.6.2b4 Arbitrary File Upload Vulnerability +...