26 matches found
EUVD-2008-1303
Malware in sbrugna...
EUVD-2008-1985
Malware in sbrugna...
EUVD-2008-1986
Malware in sbrugna...
EUVD-2005-4229
Malware in sbrugna...
EncapsGallery 1.11.2 - watermark.php file Parameter XSS
No description provided by source...
EncapsGallery 1.0 Gallery.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15836/info EncapsGallery is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation coul...
EncapsGallery 1.11.2 - catalog_watermark.php file Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/28178/info EncapsGallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...
CVE-2008-1987
Cross-site scripting XSS vulnerability in search.php in EncapsGallery 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in search.php in EncapsGallery 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
Unrestricted file upload
Unrestricted file upload vulnerability in the fileupload function in core/misc.class.php in EncapsGallery 2.0.2 allows remote authenticated administrators to upload and execute arbitrary PHP files by uploading a file with an executable extension, then accessing it via a direct request to the file...
CVE-2008-1987
Cross-site scripting XSS vulnerability in search.php in EncapsGallery 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2008-1987
CVE-2008-1987 affects EncapsGallery 2.0.2, via the search.php vulnerability where an attacker can inject arbitrary HTML/script through the search parameter (XSS). The provided sources confirm the vulnerable component and parameter vector but do not include explicit exploit details, impacted versi...
CVE-2008-1988
CVE-2008-1988 describes an unrestricted file upload in EncapsGallery 2.0.2. The flaw exists in the file_upload function of core/misc.class.php, allowing remote authenticated administrators to upload and execute arbitrary PHP files by using an executable extension, then accessing the file directly...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in EncapsGallery 1.11.2 allow remote attackers to inject arbitrary web script or HTML via the file parameter to 1 watermark.php and 2 catalogwatermark.php in core/. NOTE: the provenance of this information is unknown; the details are obtained sole...
CVE-2008-1296
Multiple cross-site scripting XSS vulnerabilities in EncapsGallery 1.11.2 allow remote attackers to inject arbitrary web script or HTML via the file parameter to 1 watermark.php and 2 catalogwatermark.php in core/. NOTE: the provenance of this information is unknown; the details are obtained sole...
CVE-2008-1296
CVE-2008-1296 affects EncapsGallery 1.11.2, with XSS vulnerabilities exploitable via the file parameter to core/watermark.php and core/catalog_watermark.php. The description in the connected documents confirms remote script/HTML injection potential, leading to arbitrary-script execution in the co...
EncapsGallery 1.11.2 - catalog_watermark.php?file Cross-Site Scripting
EncapsGallery 1.11.2 - catalogwatermark.php?file Cross-Site Scripting source: https://www.securityfocus.com/bid/28178/info EncapsGallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...
EncapsGallery 1.11.2 - watermark.php?File Cross-Site Scripting
EncapsGallery 1.11.2 - watermark.php?File Cross-Site Scripting source: https://www.securityfocus.com/bid/28178/info EncapsGallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...
EncapsGallery 1.11.2 - 'watermark.php?File' Cross-Site Scripting
source: https://www.securityfocus.com/bid/28178/info EncapsGallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...
EncapsGallery 1.11.2 - 'catalog_watermark.php?file' Cross-Site Scripting
source: https://www.securityfocus.com/bid/28178/info EncapsGallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...