Lucene search
+L

26 matches found

Cvelist
Cvelist
added 2009/05/16 6:00 p.m.35 views

CVE-2009-1650

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 albumID, 2 tagID, and 3 photoID parameters to index.html...

8.5AI score0.00993EPSS
SaveExploits2References4
exploitpack
exploitpack
added 2008/06/23 12:00 a.m.15 views

Chipmunk Blog - photos.php Cross-Site Scripting

Chipmunk Blog - photos.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29883/info Chipmunk Blog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary...

SaveExploits0
OSV
OSV
added 2007/07/19 5:30 p.m.15 views

CVE-2007-3905

SQL injection vulnerability in Zoph before 0.7.0.1 might allow remote attackers to execute arbitrary SQL commands via the order parameter to 1 photos.php and 2 editphotos.php...

8.1AI score
SaveExploits0References7
OSV
OSV
added 2007/07/19 5:30 p.m.8 views

DEBIAN-CVE-2007-3905

SQL injection vulnerability in Zoph before 0.7.0.1 might allow remote attackers to execute arbitrary SQL commands via the order parameter to 1 photos.php and 2 editphotos.php...

7.5CVSS8.5AI score0.01286EPSS
SaveExploits0References1
Prion
Prion
added 2007/07/19 5:30 p.m.18 views

Sql injection

SQL injection vulnerability in Zoph before 0.7.0.1 might allow remote attackers to execute arbitrary SQL commands via the order parameter to 1 photos.php and 2 editphotos.php...

7.5CVSS8.6AI score0.01286EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2007/03/02 9:18 p.m.5 views

CVE-2007-1144

Directory traversal vulnerability in jwpn-photos.php in J-Web Pics Navigator 2.0 allows remote attackers to list arbitrary directories via a .. dot dot in the dir parameter...

5CVSS5.8AI score0.03271EPSS
SaveExploits1References9
Rows per page
Query Builder