1047 matches found
Piwigo 2.0.9 register.php页面多个跨站脚本漏洞
BUGTRAQ ID: 39958 CVECAN ID: CVE-2010-1707 Piwigo是用PHP编写的相册脚本。 Piwigo没有正确地过滤提交给register.php页面的login和mailaddress参数便返回给了用户，远程攻击者可以通过提交恶意参数请求执行跨站脚本攻击，导致在用户浏览器会话中执行任意HTML和脚本代码。 0 Piwigo 2.0.9 厂商补丁： Piwigo project -------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CVE-2010-1707
Multiple cross-site scripting XSS vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 login and 2 mailaddress parameters...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 login and 2 mailaddress parameters...
CVE-2010-1707
Multiple cross-site scripting XSS vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 login and 2 mailaddress parameters...
CVE-2010-1707
CVE-2010-1707 affects Piwigo 2.0.9 and earlier. The register.php endpoint does not properly filter the login and mail_address parameters, enabling multiple cross‑site scripting (XSS) vulnerabilities. Remote attackers could inject arbitrary HTML/JavaScript that would execute in a victim’s browser ...
CVE-2010-1707
Multiple cross-site scripting XSS vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 login and 2 mailaddress parameters...
Piwigo 2.0.6 - Multiple Vulnerabilities
Piwigo 2.0.6 - Multiple Vulnerabilities Piwigo v2.0.6 Multiple Vulnerabilities Found By: mrme Download: http://piwigo.org/ Tested On: Windows Vista Note: For educational purposes only Vulnerabilities: XSS, CSRF, SQL Injection Author contact date: 13/12/09 Note: There is possibly many other...
Piwigo 2.0.6 - Multiple Vulnerabilities
Piwigo v2.0.6 Multiple Vulnerabilities Found By: mrme Download: http://piwigo.org/ Tested On: Windows Vista Note: For educational purposes only Vulnerabilities: XSS, CSRF, SQL Injection Author contact date: 13/12/09 Note: There is possibly many other vulnerabilities but I need to sleep! XSS...
Piwigo v2.0.6 Multiple Vulnerabilities
Exploit for unknown platform in category web applications ====================================== Piwigo v2.0.6 Multiple Vulnerabilities ====================================== Piwigo v2.0.6 Multiple Vulnerabilities Found By: mrme Download: http://piwigo.org/ Tested On: Windows Vista Note: For...
Piwigo v2.0.6 Multiple Vulnerabilities
Exploit for unknown platform in category web applications ========================================= Piwigo : mysqlfetcharray expects parameter 1 to be resource, boolean given in C:\xampp\htdocs\piwigo-2.0.6\include\functions.inc.php on line 936 The parentid and imageid and unsanitized however...
Piwigo v2.0.6 Multiple Vulnerabilities
No description provided by source. Piwigo v2.0.6 Multiple Vulnerabilities Found By: mrme Download: http://piwigo.org/ Tested On: Windows Vista Note: For educational purposes only Vulnerabilities: XSS, CSRF, SQL Injection Author contact date: 13/12/09 Note: There is possibly many other...
Piwigo 2.0.6 SQL Injection / Cross Site Scripting
Piwigo v2.0.6 Multiple Vulnerabilities Found By: mrme Download: http://piwigo.org/ Tested On: Windows Vista Note: For educational purposes only Vulnerabilities: XSS, CSRF, SQL Injection Author contact date: 13/12/09 Note: There is possibly many other vulnerabilities but I need to sleep! XSS...
CVE-2009-4039
Cross-site scripting XSS vulnerability in Piwigo before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Piwigo before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-4039
Cross-site scripting XSS vulnerability in Piwigo before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-4039
CVE-2009-4039 affects Piwigo before 2.0.6. It is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary script/HTML via unspecified vectors. The flaw’s root cause and impacted component are not detailed in the provided sources beyond the version boundary. Reme...
CVE-2009-4039
Cross-site scripting XSS vulnerability in Piwigo before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Piwigo 2.0 - comments.php Multiple Cross-Site Scripting Vulnerabilities
Piwigo 2.0 - comments.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/41897/info Piwigo is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to...
Piwigo 2.0 - 'comments.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/41897/info Piwigo is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...