kdpics116.txt

KDPics 1.16 and prior -------------------- Vendor site: http://www.kdland.org/kdpics/ Product: KDPics = 1.16 Vulnerability: Remote File Inclusion Vulnerability & XSS Credits: MrKaLiMaN Reported to Vendor: 30.11.06 Public disclosure: 09.12.06 Description: ------------ Remote File Inclusion...

KDPics Multiple Vulnerabities

KDPics 1.16 and prior -------------------- Vendor site: http://www.kdland.org/kdpics/ Product: KDPics = 1.16 Vulnerability: Remote File Inclusion Vulnerability & XSS Credits: MrKaLiMaN Reported to Vendor: 30.11.06 Public disclosure: 09.12.06 Description: ------------ Remote File Inclusion...

KDPics 1.11/1.16 - 'index.php3?categories' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21515/info KDPics is prone to multiple input-validation vulnerabilities, including cross-site scripting and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit may allow unauthorized users to vie...

KDPics 1.111.16 - index.php3?categories Cross-Site Scripting

KDPics 1.111.16 - index.php3?categories Cross-Site Scripting source: https://www.securityfocus.com/bid/21515/info KDPics is prone to multiple input-validation vulnerabilities, including cross-site scripting and remote file-include issues, because the application fails to sanitize user-supplied...

KDPics 1.111.16 - galeries.inc.php3?categories Cross-Site Scripting

KDPics 1.111.16 - galeries.inc.php3?categories Cross-Site Scripting source: https://www.securityfocus.com/bid/21515/info KDPics is prone to multiple input-validation vulnerabilities, including cross-site scripting and remote file-include issues, because the application fails to sanitize...

KDPics 1.11/1.16 - 'galeries.inc.php3?categories' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21515/info KDPics is prone to multiple input-validation vulnerabilities, including cross-site scripting and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit may allow unauthorized users to vie...