Sql injection

Multiple SQL injection vulnerabilities in MonAlbum 0.8.7 allow remote attackers to execute arbitrary SQL commands via 1 the pc parameter in a index.php and 2 pnom, 3 pcourriel, and 4 pcommentaire parameters in b imageagrandir.php...

CVE-2006-1585

CVE-2006-1585 affects MonAlbum 0.8.7, with multiple SQL injection vulnerabilities exposing the app to remote command execution through user-supplied input in the following parameters: pc (index.php) and pnom , pcourriel , pcommentaire (image_agrandir.php). The root cause is unsafely constructed S...

MonAlbum 0.8.7 SQL Injection

advisory by undefined1 @ bash-x.net/undef/ Mon Album 0.8.7 http://www.3dsrc.com/monalbum/ There are 2 sql injection flaws in MonAlbum 0.8.7. First in index.php line 99 if isset$GET"pc" $pc = $GET"pc"; ... no sanity checks if isset$pc && $grechinactive $result = executerequete"select idrub, nom,...