Code injection

The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary local files via the imageid parameter...

CVE-2015-5072

The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary local files via the imageid parameter...

Sql injection

ws.php in the Facetag extension 0.0.3 for Piwigo allows SQL injection via the imageId parameter in a facetag.changeTag or facetag.listTags action...

CVE-2017-9426

ws.php in the Facetag extension 0.0.3 for Piwigo allows SQL injection via the imageId parameter in a facetag.changeTag or facetag.listTags action...

CVE-2017-9426: Improper Neutralization of Special Elements used in an SQL Command

ws.php in the Facetag extension 0.0.3 for Piwigo allows SQL injection via the imageId parameter in a facetag.changeTag or facetag.listTags action...

Piwigo Facetag Extension SQL Injection Vulnerability

Piwigo is a web-based photo album software from Piwigo team. The software supports photo publishing, management, multiple browsing categories, tags, time, etc. Facetag extension is one of the face tagging plugins. A SQL injection vulnerability exists in the ws.php file in version 0.0.3 of the...

Cisco Unity Connection Unauthorized Access Vulnerability

Cisco Unity Connection is a feature-rich voice messaging platform that uses the Linux Unified Communications operating system. Cisco Unity Connection has an unauthorized access vulnerability vulnerability in the ImageID parameter. The vulnerability stems from the HTTP POST parameter user input no...

Cisco Unity Connection ImageID Parameter Unauthorized Access Vulnerability

A vulnerability in the ImageID parameter of Cisco Unity Connection could allow an unauthenticated, remote attacker to access files in arbitrary locations on the filesystem of an affected device. The issue is due to improper sanitization of user-supplied input in HTTP POST parameters that describe...

ImagePro Lazygirls Clone Script SQL Injection Vulnerability

ImagePro Lazygirls Clone Script is the ability to deploy a set of image sharing sites like Lazygirls.info, and the script will handle all the content needed in image sharing. ImagePro Lazygirls Clone Script has an SQL injection vulnerability in the imageID, pgid parameters, which can be exploited...

Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities

No description provided by source. Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-26 Vulnerability Laboratory ID VL-ID:...

Onpub CMS 1.4/1.5 - Multiple SQL Injections

Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-26 Vulnerability Laboratory ID VL-ID: ==================================...

Onpub CMS 1.4 / 1.5 SQL Injection

Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-26 Vulnerability Laboratory ID VL-ID: ==================================...

Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities

Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-25 Vulnerability Laboratory ID VL-ID: ==================================...

CVE-2008-6988: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Easy Photo Gallery aka Ezphotogallery 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 galleryid parameter to gallery.php, and the 2 size or 3 imageid parameters to show.php...

WBB Plugin rGallery 1.09 (itemID) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= WBB Plugin rGallery 1.09 itemID Blind SQL Injection Exploit ============================================================= import sys, urllib2, re print "\n " print " \'/ " print...

WBB Plugin rGallery 1.09 (itemID) Blind SQL Injection Exploit

No description provided by source. import sys, urllib2, re print "\n " print " \'/ " print " -.- " print " -------------------oOO------OOo--------------------" print " | rGallery 1.09 +- Exploit by Five-Three-Nine |" print " | Using Blind SQL Injection in 'itemID' of rGallery |" print " | |" prin...

WBB Plugin rGallery 1.09 - 'itemID' Blind SQL Injection

import sys, urllib2, re print "\n " print " \'/ " print " -.- " print " -------------------oOO------OOo--------------------" print " | rGallery 1.09 +- Exploit by Five-Three-Nine |" print " | Using Blind SQL Injection in 'itemID' of rGallery |" print " | |" print " | Greets and Shouts to: |" prin...

CVE-2006-2912

Multiple SQL injection vulnerabilities in SelectaPix 1.31 allow remote attackers to execute arbitrary SQL commands via the 1 albumID parameter to a viewalbum.php or b index.php, 2 imageID parameter to c popup.php, or 3 username and 4 password parameters to d admin/member.php...

Sql injection

Multiple SQL injection vulnerabilities in SelectaPix 1.31 allow remote attackers to execute arbitrary SQL commands via the 1 albumID parameter to a viewalbum.php or b index.php, 2 imageID parameter to c popup.php, or 3 username and 4 password parameters to d admin/member.php...

CVE-2006-2912

Multiple SQL injection vulnerabilities in SelectaPix 1.31 allow remote attackers to execute arbitrary SQL commands via the 1 albumID parameter to a viewalbum.php or b index.php, 2 imageID parameter to c popup.php, or 3 username and 4 password parameters to d admin/member.php...