Sql injection

Multiple SQL injection vulnerabilities in Plogger 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the checked array parameter to plog-download.php in an album action and 2 unspecified parameters to plog-remote.php, and 3 allow remote authenticated administrators to...

CVE-2008-3563

CVE-2008-3563 affects Plogger 3.0 and earlier. Vulnerabilities arise from unsanitized inputs in multiple PHP scripts: (1) plog-download.php (album action) via the checked[] parameter, (2) plog-remote.php via unspecified parameters, and (3) admin/plog-themes.php via the activate parameter (theme_d...

CVE-2008-3563

Multiple SQL injection vulnerabilities in Plogger 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the checked array parameter to plog-download.php in an album action and 2 unspecified parameters to plog-remote.php, and 3 allow remote authenticated administrators to...

Plogger <= 3.0 Remote SQL Injection Vulnerability

No description provided by source. GulfTech Security Research August 05, 2008 Vendor : Mike Johnson URL : http://www.plogger.org/ Version : Plogger = 3.0 Risk : SQL Injection Description: Plogger is a popular online gallery tool written in php that allows users to create an online gallery. It is...

Plogger plog-download.php checked[] Parameter SQL Injection

The remote host appears to be running Plogger, an open source photo gallery written in PHP. The version of Plogger installed on the remote host fails to sanitize input to the 'checked' array parameter of the 'plog-download.php' script when 'dltype' is set to 'album' before using it in a database...

Plogger 3.0 - SQL Injection

Plogger 3.0 - SQL Injection GulfTech Security Research August 05, 2008 Vendor : Mike Johnson URL : http://www.plogger.org/ Version : Plogger addfile$filecontents, $row"path"; The...

Plogger <= 3.0 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================= Plogger = 3.0 Remote SQL Injection Vulnerability ================================================= GulfTech Security Research August 05, 2008 Vendor : Mike Johnson URL :...

plogger-sql.txt

GulfTech Security Research August 05, 2008 Vendor : Mike Johnson URL : http://www.plogger.org/ Version : Plogger addfile$filecontents, $row"path";...

Plogger 3.0 - SQL Injection

GulfTech Security Research August 05, 2008 Vendor : Mike Johnson URL : http://www.plogger.org/ Version : Plogger addfile$filecontents, $row"path"; The above code comes from plog-download.php...

CVE-2007-6587

SQL injection vulnerability in plog-rss.php in Plogger 1.0 Beta 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in plog-rss.php in Plogger 1.0 Beta 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6587

SQL injection vulnerability in plog-rss.php in Plogger 1.0 Beta 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6587

Plogger 1.0 Beta 3.0 is affected by a SQL injection in plog-rss.php via the id parameter. The issue allows remote attackers to manipulate the database and potentially read/modify data. The vulnerability is confirmed across CVE-2007-6587 entries in NVD/NIST and corroborated by Nessus plugin covera...

Plogger 'plog-rss.php' SQL注入漏洞

BUGTRAQ ID: 26958 CNCAN ID:CNCAN-2007122405 Plogger是一款基于PHP的WEB应用程序。 Plogger不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'plog-rss.php'脚本对用户提交的WEB参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Plogger Plogger 1.0 Beta 3.0 可联系供应商获得补丁信息： http://www.plogger.org/...

Plogger plog-rss.php id Parameter SQL Injection

The remote host appears to be running Plogger, an open source photo gallery written in PHP. The version of Plogger installed on the remote host fails to sanitize input to the 'id' parameter of the 'plog-rss.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc' and...

CVE-2007-2277

Session fixation vulnerability in Plogger allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

Session fixation

Session fixation vulnerability in Plogger allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2007-2277

CVE-2007-2277 describes a session-fixation vulnerability in Plogger, where remote attackers can hijack web sessions by setting the PHPSESSID parameter. The vulnerability concerns the PHP session handling in Plogger and can result in partial confidentiality, integrity, and availability impacts as ...

CVE-2007-2277

Session fixation vulnerability in Plogger allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

[MajorSecurity Advisory #46]Plogger - Session fixation Issue

MajorSecurity Advisory 46Plogger - Session fixation Issue Details ======= Product: Plogger Remote-Exploit: yes Vendor-URL: http://www.plogger.org Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz http://www.majorsecurity.de Original Advisory:...