Snipe Gallery SQL&XSS vuln.

Snipe Gallery SQL&XSS vuln. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/snipe-gallery-sqlxss-vuln.html vendor:http://www.snipegallery.com/ affected version:3.1.4 and prior Product Description: Snipe Gallery is a searchable PHP/mySQL photo galle...

Snipe Gallery 3.1.4 - search.php?keyword Cross-Site Scripting

Snipe Gallery 3.1.4 - search.php?keyword Cross-Site Scripting source: https://www.securityfocus.com/bid/15844/info Snipe Gallery is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...