CVE-2009-1369: Improper Input Validation

moziloCMS 1.11 allows remote attackers to obtain sensitive information via the 1 gal parameter to gallery.php, 2 page and 3 cat parameter to index.php, or 4 file parameter to download.php, which reveals the installation path in an error message...

CVE-2008-6647

SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to execute arbitrary SQL commands via the gid parameter...

CVE-2008-6647: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to execute arbitrary SQL commands via the gid parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 radio parameter to showcategory.php, 2 msg parameter to advertisers/signinform.php, 3 radio parameter to gallery.php, 4 msg parameter to...

CVE-2008-6325: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 radio parameter to showcategory.php, 2 msg parameter to advertisers/signinform.php, 3 radio parameter to gallery.php, 4 msg parameter to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page and 2 query parameters to a index.php, 3 cat and 4 file parameters to b download.php, 5 gal parameter to gallery.php, and the 6 URL to...

CVE-2008-6127

Multiple cross-site scripting XSS vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page and 2 query parameters to a index.php, 3 cat and 4 file parameters to b download.php, 5 gal parameter to gallery.php, and the 6 URL to...

CVE-2008-6127

CVE-2008-6127 affects moziloCMS

CVE-2008-6127: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page and 2 query parameters to a index.php, 3 cat and 4 file parameters to b download.php, 5 gal parameter to gallery.php, and the 6 URL to...

phprsgal-sql.txt

--------------------------------------------------------------------------------------------------------------------------------------------------------------- phpRS 2.6.x and 2.8.X gallery.php SQL Injection Vulnerability http://www.supersvet.cz/download.php...

CVE-2008-4738

SQL injection vulnerability in gallery.php in MyCard 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in gallery.php in MyCard 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4738: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in gallery.php in MyCard 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

MyCard 1.0.2 (gallery.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ MyCard 1.0.2 gallery.php id Remote SQL Injection Vulnerability ================================================================ . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/...

Unfixed XSS vulnerability at www.cgart.ir

Security researcher SphinXKourosh.T, has submitted on 22/08/2008 a cross-site-scripting XSS vulnerability affecting www.cgart.ir, which at the time of submission ranked 1591219 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/07/2009. It is...

Ktools PhotoStore 3.4.3 (gallery.php gid) SQL Injection Vulnerability

No description provided by source. Remote SQL Injection Vulnerability PhotoStore 3.4.3 gallery.php gid Script NAME : PhotoStore VERSION : 3.4.3 DOWNLOAD : http://www.ktools.net/ AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] D0rk :: n/a ; ExPlo!t For ADMIN INFO : ===...

CVE-2008-1698

CVE-2008-1698 is an XSS vulnerability in Simple Gallery 2.2, exploitable via the album parameter to index.php in gallery.php. The occurrence is described as a remote script/HTML injection. The NVD entry lists a MEDIUM risk (CVSS v2 base score 4.3) with network access and no authentication require...

CVE-2008-1698: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in gallery.php in Simple Gallery 2.2 allows remote attackers to inject arbitrary web script or HTML via the album parameter to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-1469: Improper Authentication

Gallarific Free Edition 1.1 does not require authentication for 1 photos.php, 2 comments.php, and 3 gallery.php in gadmin/, which allows remote attackers to edit objects via a direct request, different vectors than CVE-2008-1327. NOTE: the provenance of this information is unknown; the details ar...

Clever Copy <=3.0 Multiple Remote Vulnerabilities

...:::::Clever Copy v3.0 Multiple Remote Vulnerabilities::::.... sql injection/xss Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : virangar security teamhadihadi --------------------------------- special tnx to:MR.nosrati,MR.hesy,satan,Zahra & my lovely friend ara...