PHPWebGallery 1.3.41.5.1 - picture.php SQL Injection

PHPWebGallery 1.3.41.5.1 - picture.php SQL Injection source: https://www.securityfocus.com/bid/15837/info PhpWebGallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit...

PHPWebGallery 1.3.41.5.1 - comments.php SQL Injection

PHPWebGallery 1.3.41.5.1 - comments.php SQL Injection source: https://www.securityfocus.com/bid/15837/info PhpWebGallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit...

PHPWebGallery 1.3.4/1.5.1 - 'picture.php' SQL Injection

source: https://www.securityfocus.com/bid/15837/info PhpWebGallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application,...

PHPWebGallery 1.3.4/1.5.1 - 'comments.php' SQL Injection

source: https://www.securityfocus.com/bid/15837/info PhpWebGallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application,...

PhpWebGallery multiple SQL inj.

PhpWebGallery multiple SQL inj. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/phpwebgallery-multiple-sql-inj.html vendor:http://www.phpwebgallery.net/ affected version: 1.5.1 and prior Product Description: PhpWebGallery is a image gallery with a...

PHPWebGallery 1.3.4/1.5.1 - 'category.php' SQL Injection

source: https://www.securityfocus.com/bid/15837/info PhpWebGallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application,...

CVE-2002-2064

PhpWebGallery 1.0 is affected by CVE-2002-2064. isadmin.php allows remote attackers to gain administrative access by setting the photo_login cookie to the value “pseudo,” effectively bypassing authentication. Root cause is improper cookie-based authorization in isadmin.php. The vulnerability can ...

CVE-2002-2064

isadmin.php in PhpWebGallery 1.0 allows remote attackers to gain administrative access via by setting the photologin cookie to pseudo...