47 matches found
ExhibitSQL.txt
SEC-CONSULT Security Advisory 20050602-2 ============================================================================= title: Exhibit Engine Blind SQL Injection program: Exhibit Engine vulnerable version: 1.22, 1.54 RC4 homepage: http://photography-on-the.net/ee/...
CVE-2005-1875
Exhibit Engine (EE) 1.22 is affected by multiple SQL injection vulnerabilities in list.php, exploitable via the parameters (1) search_row, (2) sort_row, (3) order, or (4) perpage, allowing remote attackers to execute arbitrary SQL. The connected sources confirm the vulnerable component and parame...
CVE-2005-1875
Multiple SQL injection vulnerabilities in list.php in Exhibit Engine EE 1.22 allow remote attackers to execute arbitrary SQL commands via the 1 searchrow, 2 sortrow, 3 order or 4 perpage parameter...
Exhibit Engine list.php Multiple Parameter SQL Injection
The remote host is running Exhibit Engine, a web-based photo gallery written in PHP. The version installed on the remote host suffers from a SQL injection vulnerability due to its failure to sanitize user-supplied input to various parameters of the 'list.php' script. An attacker can exploit these...
CVE-2005-1875
Multiple SQL injection vulnerabilities in list.php in Exhibit Engine EE 1.22 allow remote attackers to execute arbitrary SQL commands via the 1 searchrow, 2 sortrow, 3 order or 4 perpage parameter...
[Full-disclosure] SEC-CONSULT SA20050602-2 :: Exhibit Engine Blind SQL Injection
SEC-CONSULT Security Advisory 20050602-2 ============================================================================= title: Exhibit Engine Blind SQL Injection program: Exhibit Engine vulnerable version: 1.22, 1.54 RC4 homepage: http://photography-on-the.net/ee/...