CVE-2007-3000

Multiple SQL injection vulnerabilities in PHP JackKnife PHPJK allow remote attackers to execute arbitrary SQL commands via 1 the iCategoryUnq parameter to GDisplay.php or 2 the iSearchID parameter to Search/DisplayResults.php...

PHP JackKnife [multiple vulnerabilities]

Vendor site: http://www.phpjk.com/ Product: phpjackknife Bug: sql injection , xss , full path Risk: high Note: works regarless of php.ini settings Description: PHP JackKnife PHPJK is freely downloadable PHP gallery software that you can use to instantly create you own online web gallery Injection...

PHP JackKnife 2.21 - (PHPJK) UserAreaNewAccountsindex.php?sAccountUnq Cross-Site Scripting

PHP JackKnife 2.21 - PHPJK UserAreaNewAccountsindex.php?sAccountUnq Cross-Site Scripting source: https://www.securityfocus.com/bid/24253/info PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could...

PHP JackKnife 2.21 - (PHPJK) UserAreaAuthenticate.php?sUName Cross-Site Scripting

PHP JackKnife 2.21 - PHPJK UserAreaAuthenticate.php?sUName Cross-Site Scripting source: https://www.securityfocus.com/bid/24253/info PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could allow an...

PHP JackKnife 2.21 - (PHPJK) G_Display.php Multiple Cross-Site Scripting Vulnerabilities

PHP JackKnife 2.21 - PHPJK GDisplay.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/24253/info PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could...

PHP JackKnife 2.21 - '(PHPJK) G_Display.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/24253/info PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the...

PHP JackKnife 2.21 - '/(PHPJK) UserArea/NewAccounts/index.php?sAccountUnq' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24253/info PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the...

PHP JackKnife 2.21 - (PHPJK) G_Display.php?iCategoryUnq SQL Injection

PHP JackKnife 2.21 - PHPJK GDisplay.php?iCategoryUnq SQL Injection source: https://www.securityfocus.com/bid/24253/info PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could allow an attacker to...

PHP JackKnife 2.21 - (PHPJK) SearchDisplayResults.php?iSearchID SQL Injection

PHP JackKnife 2.21 - PHPJK SearchDisplayResults.php?iSearchID SQL Injection source: https://www.securityfocus.com/bid/24253/info PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could allow an...

PHP JackKnife 2.21 - '(PHPJK) G_Display.php?iCategoryUnq' SQL Injection

source: https://www.securityfocus.com/bid/24253/info PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the...

PHP JackKnife 2.21 - '/(PHPJK) Search/DisplayResults.php?iSearchID' SQL Injection

source: https://www.securityfocus.com/bid/24253/info PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the...

PHP JackKnife 2.21 - '/(PHPJK) UserArea/Authenticate.php?sUName' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24253/info PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the...

CVE-2005-4239

Cross-site scripting XSS vulnerability in Search/DisplayResults.php in PHP JackKnife 2.21 and earlier allows remote attackers to inject arbitrary web script or HTML via URL-encoded values in the sKeywords parameter...

CVE-2005-4239

The connected documents confirm CVE-2005-4239 is an XSS vulnerability in PHP JackKnife (2.21 and earlier) affecting Search/DisplayResults.php via URL-encoded sKeywords. Exploitation details are not expanded beyond the provided description; no explicit patch/version remediation is documented in th...

PHP JackKnife XSS vuln.

PHP JackKnife XSS vuln. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/php-jackknife-xss-vuln.html vendor:http://www.phpjk.com/ affected version: 2.21 and prior Product Description: PHP JackKnife is an easily set-up, fast, feature-rich photo galle...

PHP JackKnife 2.21 - Cross-Site Scripting

PHP JackKnife 2.21 - Cross-Site Scripting source: www.securityfocus.com/bid/15841/info PHP JackKnife is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...