EUVD-2006-3262

Malware in sbrugna...

qdig-xss.txt

Qdig - Quick Digital Image Gallery - http://qdig.sourceforge.net/ Version affected: qdig-1.2.9.3, qdig-devel-20060624 Risk: XSS Description: Qdig is an easy-to-use PHP script that dynamically presents your digital image files as an online gallery or set of galleries. Vulnerability: It's vulnerabl...

Cross site scripting

Cross-site scripting XSS vulnerability in Quick Digital Image Gallery Qdig 1.2.9.3 and devel-20060624 allows remote attackers to inject arbitrary web script or HTML via the Qwd parameter to the top-level URI...

CVE-2007-0876

Cross-site scripting XSS vulnerability in Quick Digital Image Gallery Qdig 1.2.9.3 and devel-20060624 allows remote attackers to inject arbitrary web script or HTML via the Qwd parameter to the top-level URI...

CVE-2007-0876

CVE-2007-0876 describes a cross-site scripting (XSS) vulnerability in Quick Digital Image Gallery (Qdig) 1.2.9.3 and devel-20060624. The issue allows remote attackers to inject arbitrary web script or HTML via the Qwd parameter to the top-level URI. Affected software is Qdig; the root cause is XS...

CVE-2007-0876

Cross-site scripting XSS vulnerability in Quick Digital Image Gallery Qdig 1.2.9.3 and devel-20060624 allows remote attackers to inject arbitrary web script or HTML via the Qwd parameter to the top-level URI...

[XSS] Qdig - Quick Digital Image Gallery Version 1.2.9.3 and -devel

Qdig - Quick Digital Image Gallery - http://qdig.sourceforge.net/ Version affected: qdig-1.2.9.3, qdig-devel-20060624 Risk: XSS Description: Qdig is an easy-to-use PHP script that dynamically presents your digital image files as an online gallery or set of galleries. Vulnerability: It's vulnerabl...

CVE-2006-3265

Multiple cross-site scripting XSS vulnerabilities in index.php in Qdig before 1.2.9.3, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 pregallery or 2 postgallery parameters...

CVE-2006-3265

CVE-2006-3265 : Multiple XSS flaws in Qdig’s index.php prior to 1.2.9.3 allow remote attackers to inject script/HTML via the pre_gallery or post_gallery parameters when register_globals is enabled. The affected product is Qdig; root cause is unsanitized input in index.php. Exploitation details ar...

CVE-2006-3265

Multiple cross-site scripting XSS vulnerabilities in index.php in Qdig before 1.2.9.3, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 pregallery or 2 postgallery parameters...