Advantech WebAccess SCADA gmicons.asp picfile Arbitrary File Upload (CVE-2017-16736)

An arbitrary file upload vulnerability exists in Advantech WebAccess SCADA software. The vulnerability is due to insufficient input validation of the picfile parameter within gmicons.asp...

PT-2011-1648

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery versions 1.5.10 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the h and t parameters to "help.php", or the picfile XXX parameter to...

CVE-2008-2075

Cross-site scripting XSS vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter...

CVE-2008-2075

Cross-site scripting XSS vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter...

CVE-2008-2075: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter...