CVE-2006-7103: Undefined Security Weakness

Multiple directory traversal vulnerabilities in EZOnlineGallery 1.3 and earlier, and possibly other versions before 1.3.2 Beta, allow remote attackers to 1 determine directory existence via a ".." in the album parameter in a showalbum action to a ezgallery.php, which produces different responses...

CVE-2006-5108: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitrary web script or HTML via the orderid parameter in 1 admin/printorder.php and 2 vieworder.php; the 3 siteurl and 4 lasearchhome parameters and 5 certain language parameters in...

CVE-2006-4166: Undefined Security Weakness

PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the image parameter to 1 image.php or 2 image.php2...

CVE-2005-4244: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 galleryid parameter to view.php and 2 imageid parameter to image.php...

CVE-2005-3021

CVE-2005-3021 affects vBulletin

CVE-2005-3021: Undefined Security Weakness

image.php in vBulletin 3.0.9 and earlier allows remote attackers with access to the administrator panel to upload arbitrary files via the upload action...