EUVD-2012-4850

Malware in sbrugna...

EUVD-2001-0217

Malware in sbrugna...

EUVD-2001-0216

Malware in sbrugna...

CVE-2012-4926

approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the activation of administrators via the u parameter in an 1 app0 disable or 2 app1 enable action...

CVE-2024-22441

HPE Cray Parallel Application Launch Service PALS is subject to an authentication bypass...

CVE-2024-22441

HPE Cray Parallel Application Launch Service PALS is subject to an authentication bypass...

CVE-2024-22441

HPE Cray Parallel Application Launch Service PALS is subject to an authentication bypass...

CVE-2024-22441

Technical details about CVE-2024-22441 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2024-22441: Improper Authentication

HPE Cray Parallel Application Launch Service PALS is subject to an authentication bypass...

PALS Library System WebPALS 1.0 pals-cgi Arbitrary Command Execution

No description provided by source. source: http://www.securityfocus.com/bid/2372/info A specially crafted URL composed of a known filename, will disclose the requested file residing on a machine running WebPALS. This vulnerability will also allow an attacker to execute arbitrary code with root...

CVE-2012-4925

Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow remote attackers to execute arbitrary SQL commands via the u parameter in a 1 app0 or 2 app1 action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2012-4926

approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the activation of administrators via the u parameter in an 1 app0 disable or 2 app1 enable action...

Sql injection

Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow remote attackers to execute arbitrary SQL commands via the u parameter in a 1 app0 or 2 app1 action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2012-4926

approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the activation of administrators via the u parameter in an 1 app0 disable or 2 app1 enable action...

CVE-2012-4925

CVE-2012-4925 describes multiple SQL injection vulnerabilities in Img Pals Photo Host 1.0, triggered via the u parameter in approve.php when performing app0 or app1 actions. The issue allows remote attackers to execute arbitrary SQL commands. The CVSSv2 score is 7.5 (HIGH) with network attack vec...

CVE-2012-4925

Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow remote attackers to execute arbitrary SQL commands via the u parameter in a 1 app0 or 2 app1 action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2012-4926

The CVE-2012-4926 issue affects Img Pals Photo Host 1.0, specifically the approve.php endpoint. The root cause is lack of authentication on requests, allowing remote attackers to change administrator activation via the u parameter in actions (app0 for disable, app1 for enable). The connected reco...

CVE-2012-4926: Improper Authentication

approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the activation of administrators via the u parameter in an 1 app0 disable or 2 app1 enable action...

CVE-2012-4925: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow remote attackers to execute arbitrary SQL commands via the u parameter in a 1 app0 or 2 app1 action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

PT-2012-5660

Name of the Vulnerable Software and Affected Versions Img Pals Photo Host version 1.0 Description The issue concerns SQL injection vulnerabilities in the approve.php file. Remote attackers can execute arbitrary SQL commands via the u parameter in certain actions, specifically in 1 app0 or 2 app1...