48 matches found
PHPWebGallery 1.3.4 - Blind SQL Injection (1)
---------------------------------------------------------------- Script : PhpWebGallery 1.3.4 Type : Vulnerabilities blind sql injection Author : Stack Google Dork : inurl:"picture.php?cat=" "Powered by PhpWebGallery 1.3.4" ---------------------------------------------------------------- Download...
Sql injection
SQL injection vulnerability in picture.php in phpTest 0.6.3 allows remote attackers to execute arbitrary SQL commands via the imageid parameter...
CVE-2008-3377
SQL injection vulnerability in picture.php in phpTest 0.6.3 allows remote attackers to execute arbitrary SQL commands via the imageid parameter...
CVE-2008-3377
The CVE-2008-3377 entry describes an SQL injection in the PHP-based application phpTest 0.6.3, specifically in picture.php where the image_id parameter is used in a SQL query. This is a server-side vulnerability that could allow remote attackers to execute arbitrary SQL commands. The NVD entry no...
CVE-2008-3377
SQL injection vulnerability in picture.php in phpTest 0.6.3 allows remote attackers to execute arbitrary SQL commands via the imageid parameter...
PHPTest 0.6.3 - SQL Injection
Name : phpTest 0.6.3 picture.php imageid Remote SQL Injection Vulnerability Author : cOndemned Dark-Coders Dork : sorry, today no dork ; Greetz : ZaBeaTy, str0ke, GregStar, Voo|doo, ixos, 0in, suN8Hclf, TBH, Avantura : Source code of "picture.php" : 24. ptregister'GET', 'imageid'; 25. 26. if...
phpTest 0.6.3 (picture.php image_id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================================= phpTest 0.6.3 picture.php imageid Remote SQL Injection Vulnerability ======================================================================= Name : phpTest 0.6.3...
PHPTest 0.6.3 - SQL Injection
PHPTest 0.6.3 - SQL Injection Name : phpTest 0.6.3 picture.php imageid Remote SQL Injection Vulnerability Author : cOndemned Dark-Coders Dork : sorry, today no dork ; Greetz : ZaBeaTy, str0ke, GregStar, Voo|doo, ixos, 0in, suN8Hclf, TBH, Avantura : Source code of "picture.php" : 24...
Cross site scripting
Cross-site scripting XSS vulnerability in picture.php in PhpWebGallery 1.7.0, when Comments for all is enabled, allows remote attackers to inject arbitrary web script or HTML via the author parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...
CVE-2007-5012
Cross-site scripting XSS vulnerability in picture.php in PhpWebGallery 1.7.0, when Comments for all is enabled, allows remote attackers to inject arbitrary web script or HTML via the author parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...
CVE-2007-2368
picture.php in WebSPELL 4.01.02 and earlier allows remote attackers to read arbitrary files via the file parameter...
Design/Logic Flaw
picture.php in WebSPELL 4.01.02 and earlier allows remote attackers to read arbitrary files via the file parameter...
CVE-2007-2368
picture.php in WebSPELL 4.01.02 and earlier allows remote attackers to read arbitrary files via the file parameter...
CVE-2007-2368
WebSPELL 4.01.02 (and earlier) is affected in picture.php where the file parameter can be abused to read arbitrary files. Root cause: improper handling of the file parameter allows remote attackers to access files, with no authentication and network-based access. The issue has a NVD CVSS v2 base ...
WebSPELL <= 4.01.02 (picture.php) File Disclosure Vulnerability
No description provided by source. WebSPELL = 4.01.02 picture.php Remote File Disclosure Vulnerabilitybr / Discovered by: Trexbr / Visit: www.Trex-Online.net / www.UnderGround.agbr / Comment: Happy easter!br / br / br / / / br / / / \/ / br /...
WebSPELL <= 4.01.02 (picture.php) File Disclosure Vulnerability
Exploit for unknown platform in category web applications =============================================================== WebSPELL = 4.01.02 picture.php File Disclosure Vulnerability =============================================================== WebSPELL = 4.01.02 picture.php Remote File...
WebSPELL 4.01.02 - picture.php File Disclosure
WebSPELL 4.01.02 - picture.php File Disclosure WebSPELL = 4.01.02 picture.php Remote File Disclosure Vulnerability Discovered by: Trex Visit: www.Trex-Online.net / www.UnderGround.ag Comment: Happy easter! / \ / \ / / / \ \ / \ /\ // / GIVE ME A CARROT OR I WILL \ \O O/ \ BLOW UP YOUR HOUSE / /...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Advanced Guestbook 2.4.2 allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter to 1 index.php, 2 addentry.php, or 3 picture.php, a different set of vectors than CVE-2006-5804. NOTE: this issue has been...
Advanced Guestbook <=- 2.4.2 (include_path) Remote File Include Vulnerability
Advanced Guestbook =- 2.4.2 includepath Remote File Include Vulnerability Script: Advanced Guestbook Version: 2.4.2 URL: http://proxy2.de/js/dl86d7a2.php Found By : BorN To K!LL Bug in : index.php , addentry.php , picture.php code :. requireonce $includepath."/admin/config.inc.php"; requireonce...
CVE-2006-3616
Multiple cross-site scripting XSS vulnerabilities in Carbonize Lazarus Guestbook 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the show parameter in codes-english.php and 2 the img parameter in picture.php, after the name of an existing file...