CVE-2006-2211

321soft PhP-Gallery 0.9 is affected by an absolute path traversal in index.php via the path parameter. This allows remote attackers to browse arbitrary directories on the server. No remediation details are provided in the supplied documents; verify with vendor advisories or updates for a patched ...

321soft PhP Gallery 0.9 - directory travel & XSS

321soft PhP Gallery 0.9 - directory travel & XSS -------------------------------------------------------- Software: 321soft PhP Gallery Version: 0.9 Type: directory travel & XSS Date: Mai 3 01:38:04 CEST 2006 Vendor: 321soft.de Page: http://321soft.de/ Risc: Middle credits:...

321soft PHP-Gallery 0.9 - index.php?path Arbitrary Directory Listing

321soft PHP-Gallery 0.9 - index.php?path Arbitrary Directory Listing source: https://www.securityfocus.com/bid/17812/info PhP-Gallery is prone to an information-disclosure vulnerability and a cross-site scripting vulnerability. These issues are due to a failure in the application to properly...

321soft PHP-Gallery 0.9 - index.php?path Cross-Site Scripting

321soft PHP-Gallery 0.9 - index.php?path Cross-Site Scripting source: https://www.securityfocus.com/bid/17812/info PhP-Gallery is prone to an information-disclosure vulnerability and a cross-site scripting vulnerability. These issues are due to a failure in the application to properly sanitize...

321soft PHP-Gallery 0.9 - 'index.php?path' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17812/info PhP-Gallery is prone to an information-disclosure vulnerability and a cross-site scripting vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these vulnerabiliti...

Path traversal

Enhanced Simple PHP Gallery 1.7 allows remote attackers to obtain the full path of the application via a direct request to sphelperfunctions.php, which leaks the pathname in an error message...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Enhanced Simple PHP Gallery 1.7 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2006-0112

Cross-site scripting XSS vulnerability in index.php in Enhanced Simple PHP Gallery 1.7 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2006-0112

CVE-2006-0112 is an XSS vulnerability in the file index.php of Enhanced Simple PHP Gallery 1.7 , allowing remote attackers to inject arbitrary script or HTML via the dir parameter. The connected records (NVD/NVD-derived entries, PRION, CVELIST) reiterate the same description and do not provide pa...

CVE-2006-0112

Cross-site scripting XSS vulnerability in index.php in Enhanced Simple PHP Gallery 1.7 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2006-0113

CVE-2006-0113 affects Enhanced Simple PHP Gallery 1.7. The issue arises when an attacker can trigger a direct request to sp_helper_functions.php, causing an error message to leak the application’s full path (pathname). This is a path-traversal/information-disclosure symptom that could aid targeti...

[SA18310] Enhanced Simple PHP Gallery "dir" Cross-Site Scripting Vulnerability

TITLE: Enhanced Simple PHP Gallery "dir" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18310 VERIFY ADVISORY: http://secunia.com/advisories/18310/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Enhanced Simple PHP Gallery 1.x...