CVE-2004-2175

Multiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute arbitrary SQL commands via the 1 product parameter to showproduct.php or 2 cat parameter to showcat.php...

CVE-2004-2175

The CVE-2004-2175 entry corresponds to SQL injection flaws in ReviewPost PHP Pro. Affected: ReviewPost PHP Pro web app; vulnerable in showproduct.php (product param) and showcat.php (cat param). Cause: unsanitized user input used in database queries. Impact: potential data disclosure and, per Ope...

CVE-2004-2175: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute arbitrary SQL commands via the 1 product parameter to showproduct.php or 2 cat parameter to showcat.php...

CVE-2005-1629

SQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to execute arbitrary SQL commands via the verifykey parameter...

CVE-2005-1629

SQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to execute arbitrary SQL commands via the verifykey parameter...

CVE-2005-1629

Photopost PHP Pro contains a SQL injection in member.php via the verifykey parameter, allowing remote attackers to execute arbitrary SQL commands. Root cause: unsanitized input used in SQL queries. Affected component: Photopost PHP Pro (member.php). Exploitation status is not detailed in the prov...

CVE-2005-1629: Undefined Security Weakness

SQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to execute arbitrary SQL commands via the verifykey parameter...

PhotoPost PHP Pro < 5.02 RC4 member.php uid Parameter SQL Injection

Binary data 2903.prm...

CVE-2004-1870

PhotoPost PHP Pro 4.6.x and earlier are affected by multiple SQL injection vulnerabilities. The CVE entry references attackers being able to extract user passwords via parameters such as photo (addfav.php, comments.php), credit (comments.php), cat (index.php, showgallery.php), ppuser (showgallery...

CVE-2004-1870

Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users' passwords via the 1 photo parameter to addfav.php, 2 photo parameter to comments.php, 3 credit parameter to comments.php, 4 cat parameter to index.php, 5 ppuser parameter to...

CVE-2004-1871

PhotoPost PHP Pro 4.6.x and earlier are affected by multiple cross-site scripting (XSS) vulnerabilities. Exploitation targets showmembers.php via the parameters ppuser, password, stype, perpage, sort, page, si, cat, and also the photo/album name/description fields. Affected product/version: Photo...

CVE-2004-1871

Multiple cross-site scripting XSS vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ppuser, 2 password, 3 stype, 4 perpage, 5 sort, 6 page, 7 si, or 8 cat parameters to showmembers.php, or the 9 photo name, 10 photo...

CVE-2004-1870: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users' passwords via the 1 photo parameter to addfav.php, 2 photo parameter to comments.php, 3 credit parameter to comments.php, 4 cat parameter to index.php, 5 ppuser parameter to...

CVE-2004-1871: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ppuser, 2 password, 3 stype, 4 perpage, 5 sort, 6 page, 7 si, or 8 cat parameters to showmembers.php, or the 9 photo name, 10 photo...

CVE-2005-0270

Multiple cross-site scripting XSS vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to inject arbitrary web script or HTML via the 1 si parameter to showcat.php, 2 cat or 3 page parameter to showproduct.php, or 4 report parameter to reportproduct.php...

CVE-2005-0928

Multiple cross-site scripting XSS vulnerabilities in PhotoPost PHP Pro 5.x allow remote attackers to inject arbitrary web script or HTML via the 1 cat, 2 password, 3 ppuser, 4 sort, or 5 si parameters to showgallery.php, the 6 ppuser, 7 sort, or 8 si parameters to showmembers.php, or 9 the photo...

CVE-2005-0272

ReviewPost PHP Pro before 2.84 allows remote attackers to upload and execute arbitrary PHP files by posting a review file with multiple extensions, which bypasses the intended restrictions...

CVE-2005-0929

SQL injection vulnerability in PhotoPost PHP Pro 5.x may allow remote attackers to execute arbitrary SQL commands via 1 the sl parameter to showmembers.php or 2 the photo parameter to showphoto.php...

Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software.

Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Severity: High Title: Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software. Date: March 29, 2005 Summary: There are multiple sql injection, xss...

CVE-2005-0929

PhotoPost PHP Pro 5.x contains a SQL injection vulnerability exploitable via the sl parameter in showmembers.php or the photo parameter in showphoto.php, allowing remote attackers to potentially execute arbitrary SQL commands. The issue is caused by unsafely handling user-supplied input in these ...