CVE-2008-6977

Cross-site scripting XSS vulnerability in album.asp in Full Revolution aspWebAlbum 3.2 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a summary action...

Unrestricted file upload

Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in pics/, related to the uploadmedia action in album.asp...

CVE-2008-6977

CVE-2008-6977 is an XSS vulnerability in Full Revolution aspWebAlbum 3.2, affecting album.asp where a crafted message parameter in a summary action can inject arbitrary script/HTML. The base metrics show a MEDIUM severity with network access, no authentication, and partial integrity impact. The d...

CVE-2008-6978

CVE-2008-6978 : Full Revolution aspWebAlbum 3.2 is affected by an unrestricted file upload vulnerability. Uploading a file with an executable extension via the uploadmedia action in album.asp to the pics/ path enables remote code execution. The connected documents do not provide patch or remediat...

CVE-2008-6978

Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in pics/, related to the uploadmedia action in album.asp...

aspWebAlbum 3.2 (Upload/SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. - Discovered bay AleminKrali ==== - aspWebAlbum 3.2 - Script Download "http://www.fullrevolution.com" - aspWebAlbum 3.2 Single Site License | $60.00 : - HomePage al3m.blogspot.com...

Unrestricted file upload

Unrestricted file upload vulnerability in calendaradmin.asp in Full Revolution aspWebCalendar 2008 allows remote attackers to upload and execute arbitrary code via the FILE1 parameter in an uploadfileprocess action, probably followed by a direct request to the file in calendar/eventimages/...