108 matches found
PHPWebGallery 1.3.41.5.1 - comments.php SQL Injection
PHPWebGallery 1.3.41.5.1 - comments.php SQL Injection source: https://www.securityfocus.com/bid/15837/info PhpWebGallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit...
PHPWebGallery 1.3.41.5.1 - category.php SQL Injection
PHPWebGallery 1.3.41.5.1 - category.php SQL Injection source: https://www.securityfocus.com/bid/15837/info PhpWebGallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit...
PhpWebGallery multiple SQL inj.
PhpWebGallery multiple SQL inj. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/phpwebgallery-multiple-sql-inj.html vendor:http://www.phpwebgallery.net/ affected version: 1.5.1 and prior Product Description: PhpWebGallery is a image gallery with a...
PHPWebGallery 1.3.4/1.5.1 - 'category.php' SQL Injection
source: https://www.securityfocus.com/bid/15837/info PhpWebGallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application,...
PHPWebGallery 1.3.4/1.5.1 - 'comments.php' SQL Injection
source: https://www.securityfocus.com/bid/15837/info PhpWebGallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application,...
PHPWebGallery 1.3.4/1.5.1 - 'picture.php' SQL Injection
source: https://www.securityfocus.com/bid/15837/info PhpWebGallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application,...
CVE-2002-2064
PhpWebGallery 1.0 is affected by CVE-2002-2064. isadmin.php allows remote attackers to gain administrative access by setting the photo_login cookie to the value “pseudo,” effectively bypassing authentication. Root cause is improper cookie-based authorization in isadmin.php. The vulnerability can ...
