embassyofindia.kg XSS vulnerability

Vulnerable URL: https://www.embassyofindia.kg/gallerylist.php/%22%27%2D%2D%21%3E%3CImage%0CSrcset%3DK%0COnerror%3Dconfirm%60OPENBUGBOUNTY%60%0C Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Sql injection

SQL injection vulnerability in gallerylist.php in YABSoft Advanced Image Hosting AIH Script 2.3 allows remote attackers to execute arbitrary SQL commands via the gal parameter...

CVE-2009-1032

CVE-2009-1032 refers to a SQL injection vulnerability in gallery_list.php of YABSoft Advanced Image Hosting (AIHS) Script 2.3 , where the gal parameter can be exploited to execute arbitrary SQL commands. Multiple sources (NVD, OpenVAS entries) corroborate that this vulnerability affects the AIHS,...

CVE-2009-1032: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in gallerylist.php in YABSoft Advanced Image Hosting AIH Script 2.3 allows remote attackers to execute arbitrary SQL commands via the gal parameter...