EUVD-2005-0377

Malware in sbrugna...

EUVD-2005-0378

Malware in sbrugna...

CVE-2005-0375

imageview.php in SGallery 1.01 allows remote attackers to obtain sensitive information via an HTTP request with 1 idalbum and 2 idimage unset, which reveals the installation path in an error message for the sqlfetchrow function...

CVE-2005-0376

The CVE-2005-0376 entry describes a PHP remote file inclusion in SGallery 1.01 where an attacker can modify DOCUMENT_ROOT to reference a URL on a remote server and execute arbitrary PHP code in the files (config.php or sql_layer.php). Root cause: improper validation of DOCUMENT_ROOT enabling remo...

CVE-2005-0377

The CVE describes an SQL injection in SGallery 1.01 (imageview.php) that can be triggered via the idalbum or idimage parameters, allowing remote execution of arbitrary SQL commands. CVSS v2 base score 7.5 ( HIGH ) with network attack vector and low attack complexity; impacts on confidentiality, i...

CVE-2005-0376

PHP remote file inclusion vulnerability in SGallery 1.01 allows local and possibly remote attackers to execute arbitrary PHP code by modifying the DOCUMENTROOT parameter to reference a URL on a remote web server that contains 1 config.php or 2 sqllayer.php...

CVE-2005-0377

SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to execute arbitrary SQL commands via the 1 idalbum or 2 idimage parameters...