embassyofindia.kg XSS vulnerability

Vulnerable URL: https://www.embassyofindia.kg/gallerylist.php/%22%27%2D%2D%21%3E%3CImage%0CSrcset%3DK%0COnerror%3Dconfirm%60OPENBUGBOUNTY%60%0C Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Sql injection

SQL injection vulnerability in gallerylist.php in YABSoft Advanced Image Hosting AIH Script 2.3 allows remote attackers to execute arbitrary SQL commands via the gal parameter...

CVE-2009-1032

CVE-2009-1032 refers to a SQL injection vulnerability in gallery_list.php of YABSoft Advanced Image Hosting (AIHS) Script 2.3 , where the gal parameter can be exploited to execute arbitrary SQL commands. Multiple sources (NVD, OpenVAS entries) corroborate that this vulnerability affects the AIHS,...