EUVD-2005-0378

Malware in sbrugna...

CVE-2005-0375

imageview.php in SGallery 1.01 allows remote attackers to obtain sensitive information via an HTTP request with 1 idalbum and 2 idimage unset, which reveals the installation path in an error message for the sqlfetchrow function...

CVE-2005-0377

SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to execute arbitrary SQL commands via the 1 idalbum or 2 idimage parameters...

CVE-2005-0375

CVE-2005-0375 affects SGallery 1.01 via imageview.php. When (1) idalbum or (2) idimage is unset, an error in sql_fetch_row reveals the installation path, exposing sensitive information. This is a partial confidentiality impact described by the NVD score (base 5.0). The connected records confirm t...

CVE-2005-0377

SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to execute arbitrary SQL commands via the 1 idalbum or 2 idimage parameters...

CVE-2005-0377: Undefined Security Weakness

SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to execute arbitrary SQL commands via the 1 idalbum or 2 idimage parameters...

CVE-2005-0375: Undefined Security Weakness

imageview.php in SGallery 1.01 allows remote attackers to obtain sensitive information via an HTTP request with 1 idalbum and 2 idimage unset, which reveals the installation path in an error message for the sqlfetchrow function...

CVE-2004-0067

CVE-2004-0067 describes multiple cross-site scripting (XSS) vulnerabilities in phpGedView prior to 2.65. The issue allows remote attackers to inject arbitrary HTML or JavaScript through numerous PHP/WEB pages (e.g., descendancy.php, index.php, individual.php, login.php, relationship.php, source.p...

CVE-2004-0066: Undefined Security Weakness

phpGedView before 2.65 allows remote attackers to obtain the absolute path of the web server via malformed parameters to 1 indilist.php, 2 famlist.php, 3 placelist.php, 4 imageview.php, 5 timeline.php, 6 clippings.php, 7 login.php, and 8 gdbi.php...