Cross site scripting

Cross-site scripting XSS vulnerability in home.php in Opial 1.0 allows remote attackers to inject arbitrary web script or HTML via the genresparent parameter...

CVE-2009-3751

Cross-site scripting XSS vulnerability in home.php in Opial 1.0 allows remote attackers to inject arbitrary web script or HTML via the genresparent parameter...

Unrestricted file upload

Unrestricted file upload vulnerability in Opial 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension as a User Image, then accessing it via a request to the file in userimages, related to register.php...

Sql injection

SQL injection vulnerability in home.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the genresparent parameter...

CVE-2009-3752

Opial 1.0 is affected by a SQL injection in home.php through the genres_parent parameter. This allows remote attackers to execute arbitrary SQL commands. The vulnerability has a CVSS v2 base score of 7.5 (HIGH) with network attack vector, low attack complexity, no authentication, and partial impa...

CVE-2009-3751

Cross-site scripting XSS vulnerability in home.php in Opial 1.0 allows remote attackers to inject arbitrary web script or HTML via the genresparent parameter...

CVE-2009-3752

SQL injection vulnerability in home.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the genresparent parameter...

CVE-2009-3753

Unrestricted file upload vulnerability in Opial 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension as a User Image, then accessing it via a request to the file in userimages, related to register.php...

CVE-2009-3753

CVE-2009-3753 is an unrestricted file upload vulnerability in Opial 1.0. An attacker could upload a file with an executable extension as a User Image and access it via a request to the file in userimages (related to register.php) to execute arbitrary code. The NVD entry scores it 7.5/10 (HIGH) wi...

CVE-2009-3751

CVE-2009-3751 describes a cross-site scripting (XSS) vulnerability in Opial 1.0, specifically in home.php where the genres_parent parameter can be exploited to inject arbitrary web script or HTML. The issue is triggered remotely, enabling script execution in the context of affected users. The pro...

Opial 1.0 File Upload / XSS / SQL Injection

::::::::::::::::::::R3AL.RU:::::::::::::::::::: Opial 1.0 Arbitrary File Upload & XSS & SQL Injection genresparent Author: LMaster Greetz: r3al.ru Official Site with demo: http://www.opial.com --Arbitrary File UploadSQL InjectionXSSalertdocument.cookie; Demo: http://www.opial.com/demo/register.ph...

Opial 1.0 - Arbitrary File Upload Cross-Site Scripting SQL Injection

Opial 1.0 - Arbitrary File Upload Cross-Site Scripting SQL Injection ::::::::::::::::::::R3AL.RU:::::::::::::::::::: Opial 1.0 Arbitrary File Upload & XSS & SQL Injection genresparent Author: LMaster Greetz: r3al.ru Official Site with demo: http://www.opial.com --Arbitrary File UploadSQL...

Opial 1.0 - Arbitrary File Upload / Cross-Site Scripting / SQL Injection

::::::::::::::::::::R3AL.RU:::::::::::::::::::: Opial 1.0 Arbitrary File Upload & XSS & SQL Injection genresparent Author: LMaster Greetz: r3al.ru Official Site with demo: http://www.opial.com --Arbitrary File UploadSQL InjectionXSSalertdocument.cookie; Demo: http://www.opial.com/demo/register.ph...

Opial 1.0 Arbitrary File Upload/XSS/SQL Injection Vulnerabilities

No description provided by source. ::::::::::::::::::::R3AL.RU:::::::::::::::::::: Opial 1.0 Arbitrary File Upload & XSS & SQL Injection genresparent Author: LMaster Greetz: r3al.ru Official Site with demo: http://www.opial.com --Arbitrary File Upload-- 1. Go to http://www.site.com/register.php 2...

Opial 1.0 Arbitrary File Upload/XSS/SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= Opial 1.0 Arbitrary File Upload/XSS/SQL Injection Vulnerabilities ================================================================= Opial 1.0 Arbitrary File Upload & XSS & S...

CVE-2009-2388

SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtPassword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtPassword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2388

CVE-2009-2388 describes an SQL injection in Opial 1.0: admin/index.php, vulnerable via the txtPassword parameter, enabling remote execution of arbitrary SQL commands. The root cause is unsanitized input in this parameter. Practical impact stated is remote command execution with partial confidenti...

CVE-2009-2388

SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtPassword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Opial多个模块SQL注入漏洞

BUGTRAQ ID: 35562,35560 CVECAN ID: CVE-2009-2341,CVE-2009-2340 Opial是用于在网站上管理音频/视频下载的工具。 Opial的admin/index.php模块没有正确地过滤用户所提交的txtUserName和txtPassword参数，albumdetail.php模块没有正确过滤albumid参数，远程攻击者可以通过提交恶意请求执行SQL注入攻击。 Shalwan Enterprises Opial 1.0 厂商补丁： Shalwan Enterprises -------------------...