9 matches found
PT-2011-4980
Name of the Vulnerable Software and Affected Versions Prestashop version 1.4.4.1 Description A CRLF injection issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the name parameter in the admin/displayImage.php file. Recommendations For...
CVE-2011-4545: Improper Control of Generation of Code
CRLF injection vulnerability in admin/displayImage.php in Prestashop 1.4.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the name parameter...
CVE-2008-2501
Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via the 1 album parameter to thumbnails.php and the 2 pid parameter to displayimage.php...
Sql injection
Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via the 1 album parameter to thumbnails.php and the 2 pid parameter to displayimage.php...
CVE-2008-2501: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via the 1 album parameter to thumbnails.php and the 2 pid parameter to displayimage.php...
CVE-2005-2676
The CVE-2005-2676 entry concerns Coppermine Photo Gallery prior to version 1.3.4, where displayimage.php is vulnerable to cross-site scripting via crafted EXIF data. The vulnerability allows an attacker-supplied EXIF payload to be reflected into the HTML/JS context, enabling arbitrary script exec...
CVE-2005-2676
Cross-site scripting XSS vulnerability in displayimage.php in Coppermine Photo Gallery before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via EXIF data...
CVE-2005-2676: Undefined Security Weakness
Cross-site scripting XSS vulnerability in displayimage.php in Coppermine Photo Gallery before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via EXIF data...
