PT-2026-95393

Name of the Vulnerable Software and Affected Versions ClipBucket versions prior to 5.5.3-182 Description Authenticated users can extract arbitrary data from the database via a blind SQL injection. This occurs when the check photo parameter is submitted as an array, bypassing the clean requests...

EUVD-2007-3889

Malware in sbrugna...

CVE-2023-6413

A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via photos.php in the id and user parameters. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and...

CVE-2023-6413

A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via photos.php in the id and user parameters. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and...

Sql injection

A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via photos.php in the id and user parameters. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and...

CVE-2023-6413 SQL injection in Voovi Social Networking Script

A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via photos.php in the id and user parameters. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and...

CVE-2023-6413: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via photos.php in the id and user parameters. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and...

PT-2023-32644

Name of the Vulnerable Software and Affected Versions Voovi Social Networking Script version 1.0 Description A SQL injection vulnerability has been reported, affecting the photos.php endpoint in the id and user parameters. This could allow a remote attacker to send a specially crafted SQL query t...

nancybrown.com XSS vulnerability

Open Bug Bounty ID: OBB-639007 Description| Value ---|--- Affected Website:| nancybrown.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lechaletdulac-laclusaz.com XSS vulnerability

Open Bug Bounty ID: OBB-618557 Description| Value ---|--- Affected Website:| lechaletdulac-laclusaz.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dvoynik.ru XSS vulnerability

Open Bug Bounty ID: OBB-453464 Description| Value ---|--- Affected Website:| dvoynik.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

umpchannel.ump.edu.my XSS vulnerability

Vulnerable URL: http://umpchannel.ump.edu.my/photos.php?cat=%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E=viewall=alltime=1catname=All Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

krfabs.com XSS vulnerability

Open Bug Bounty ID: OBB-192137 Description| Value ---|--- Affected Website:| krfabs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Sql injection

Multiple SQL injection vulnerabilities in Zoph aka Zoph Organizes Photos 0.9.1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 action parameter to group.php or 2 user.php or the 3 locationid parameter to photos.php in php/...

CVE-2014-9235

Multiple SQL injection vulnerabilities in Zoph aka Zoph Organizes Photos 0.9.1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 action parameter to group.php or 2 user.php or the 3 locationid parameter to photos.php in php/...

PT-2014-8890

Name of the Vulnerable Software and Affected Versions Zoph versions 0.9.1 and earlier Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the action parameter to group.php or user.php, or the location id parameter to photos.php in...

PT-2014-8891

Name of the Vulnerable Software and Affected Versions Zoph versions 0.9.1 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the photographer id or crumb parameter in the...

CVE-2014-9235: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Zoph aka Zoph Organizes Photos 0.9.1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 action parameter to group.php or 2 user.php or the 3 locationid parameter to photos.php in php/...

iScripts SocialWare 2.2.x Arbitrary File Upload Vulnerability

No description provided by source. /iScripts SocialWare 2.2.x Arbitrary File Upload Vulnerability Name iScripts SocialWare Vendor http://www.iscripts.com Versions Affected 2.2.x Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com...

Chipmunk Blog photos.php membername Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/29883/info Chipmunk Blog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in th...