26 matches found
EUVD-2008-1985
Malware in sbrugna...
EUVD-2008-1303
Malware in sbrugna...
EUVD-2005-4229
Malware in sbrugna...
EUVD-2008-1986
Malware in sbrugna...
EncapsGallery 1.11.2 - watermark.php file Parameter XSS
No description provided by source...
EncapsGallery 1.11.2 - catalog_watermark.php file Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/28178/info EncapsGallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...
EncapsGallery 1.0 Gallery.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15836/info EncapsGallery is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation coul...
Unrestricted file upload
Unrestricted file upload vulnerability in the fileupload function in core/misc.class.php in EncapsGallery 2.0.2 allows remote authenticated administrators to upload and execute arbitrary PHP files by uploading a file with an executable extension, then accessing it via a direct request to the file...
Cross site scripting
Cross-site scripting XSS vulnerability in search.php in EncapsGallery 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2008-1987
Cross-site scripting XSS vulnerability in search.php in EncapsGallery 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2008-1987
CVE-2008-1987 affects EncapsGallery 2.0.2, via the search.php vulnerability where an attacker can inject arbitrary HTML/script through the search parameter (XSS). The provided sources confirm the vulnerable component and parameter vector but do not include explicit exploit details, impacted versi...
CVE-2008-1987
Cross-site scripting XSS vulnerability in search.php in EncapsGallery 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2008-1988
CVE-2008-1988 describes an unrestricted file upload in EncapsGallery 2.0.2. The flaw exists in the file_upload function of core/misc.class.php, allowing remote authenticated administrators to upload and execute arbitrary PHP files by using an executable extension, then accessing the file directly...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in EncapsGallery 1.11.2 allow remote attackers to inject arbitrary web script or HTML via the file parameter to 1 watermark.php and 2 catalogwatermark.php in core/. NOTE: the provenance of this information is unknown; the details are obtained sole...
CVE-2008-1296
Multiple cross-site scripting XSS vulnerabilities in EncapsGallery 1.11.2 allow remote attackers to inject arbitrary web script or HTML via the file parameter to 1 watermark.php and 2 catalogwatermark.php in core/. NOTE: the provenance of this information is unknown; the details are obtained sole...
CVE-2008-1296
CVE-2008-1296 affects EncapsGallery 1.11.2, with XSS vulnerabilities exploitable via the file parameter to core/watermark.php and core/catalog_watermark.php. The description in the connected documents confirms remote script/HTML injection potential, leading to arbitrary-script execution in the co...
EncapsGallery 1.11.2 - 'catalog_watermark.php?file' Cross-Site Scripting
source: https://www.securityfocus.com/bid/28178/info EncapsGallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...
EncapsGallery 1.11.2 - watermark.php?File Cross-Site Scripting
EncapsGallery 1.11.2 - watermark.php?File Cross-Site Scripting source: https://www.securityfocus.com/bid/28178/info EncapsGallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...
EncapsGallery 1.11.2 - catalog_watermark.php?file Cross-Site Scripting
EncapsGallery 1.11.2 - catalogwatermark.php?file Cross-Site Scripting source: https://www.securityfocus.com/bid/28178/info EncapsGallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...
EncapsGallery 1.11.2 - 'watermark.php?File' Cross-Site Scripting
source: https://www.securityfocus.com/bid/28178/info EncapsGallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...