CVE-2008-5794: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote attackers to delete arbitrary files via a .. dot dot in the delete parameter...

LoveCMS 1.6.2 Final Arbitrary File Delete Vulnerability

Exploit for unknown platform in category web applications ======================================================= LoveCMS 1.6.2 Final Arbitrary File Delete Vulnerability =======================================================...

Sql injection

Multiple SQL injection vulnerabilities in Jetbox CMS 2.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 orderby parameter to admin/cms/images.php and the 2 navid parameter in an editrecord action to admin/cms/nav.php...

CVE-2008-4651

CVE-2008-4651 affects Jetbox CMS 2.1 with multiple SQL injection vulnerabilities that allow remote authenticated users to execute arbitrary SQL commands. The issues are triggered via (1) the orderby parameter to admin/cms/images.php and (2) the nav_id parameter in an editrecord action to admin/cm...

CVE-2008-4651: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Jetbox CMS 2.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 orderby parameter to admin/cms/images.php and the 2 navid parameter in an editrecord action to admin/cms/nav.php...

CVE-2008-3511: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Softbiz Image Gallery Photo Gallery allow remote attackers to inject arbitrary web script or HTML via the 1 latest parameter to a index.php, b images.php, c suggestimage.php, and d imagedesc.php; and the 2 msg parameter to index.php, images.php...

CVE-2008-3232: Improper Control of Generation of Code

Unrestricted file upload vulnerability in ecrire/images.php in Dotclear 1.2.7.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images...

CVE-2008-1064: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in images.php in the Red Mexico RMSOFT Gallery System GS 2.0 module aka rmgs for XOOPS allows remote attackers to inject arbitrary web script or HTML via the q parameter...

RMSOFT Gallery System 2.0 (images.php id) SQL Injection Vulnerability

No description provided by source. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-= Author: youkn0w Contact: you-knowatlinuxmail.org Website: www.youknowz.info Script: RRMSOFT Gallery Bug: RRMSOFT Gallery Remote SQL Injection =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-= Script Information...

CVE-2008-0611

CVE-2008-0611 : SQL injection in the RMSOFT Gallery System 2.0 module for XOOPS (rmgs/images.php) allows remote attackers to run arbitrary SQL via the id parameter. Affected component: rmgs/images.php in RMSOFT Gallery System 2.0 for XOOPS. Consequences: partial impact to confidentiality, integri...

CVE-2008-0611: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in rmgs/images.php in the RMSOFT Gallery System 2.0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

Pluxml Images.PHP远程文件包含漏洞

Eva-Web是一款基于PHP的WEB应用程序。 Eva-Web不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Index.PHP3'脚本对用户提交的WEB参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 SPIP-Education EVA-Web 2.1.2 SPIP-Education EVA-Web 2.2 SPIP-Education EVA-Web 2.1 SPIP-Education EVA-Web 2.0 目前没有详细解决方案提供：...

CVE-2007-3432: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute arbitrary PHP code via a .jpg filename...

CVE-2006-7082: Undefined Security Weakness

Rigter Portal System RPS 1.0, 2.0, and 3.0 allows remote attackers to bypass authentication and upload arbitrary files via direct requests to 1 adm/photos/images.php and 2 adm/down/files.php...

CVE-2006-5532: Undefined Security Weakness

Cross-site scripting XSS vulnerability in rmgs/images.php in RMSOFT Gallery System 2.0 allows remote attackers to inject arbitrary web script or HTML via the kw parameter. NOTE: some of these details are obtained from third party information...

CVE-2006-4922: Undefined Security Weakness

Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School S@S 2.4.02 and earlier allows remote attackers to upload and execute arbitrary files with executable extensions...

CVE-2006-4919: Undefined Security Weakness

Directory traversal vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School S@S 2.4.02 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the dir parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Realty Pro One allow remote attackers to inject arbitrary web script or HTML via the 1 listingid parameter to a images.php, b indexother.php, or c requestinfo.php; 2 propertyid parameter to d searchlookup.php, 3 id parameter to e images.php, or...

CVE-2006-1659

Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in imagedesc.php, 2 provided parameter in template.php, 3 cid parameter in suggestimage.php, 4 imgid parameter in insertrating.php, and 5 cid parameter i...

CVE-2006-1659: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in imagedesc.php, 2 provided parameter in template.php, 3 cid parameter in suggestimage.php, 4 imgid parameter in insertrating.php, and 5 cid parameter i...