CVE-2005-4245

CVE-2005-4245 is a cross-site scripting (XSS) vulnerability in Snipe Gallery 3.1.4 and earlier affecting the file search.php . The issue arises from the keyword parameter, allowing remote attackers to inject arbitrary web script or HTML. According to the record, the impact is confidentiality: non...

CVE-2005-4244

SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 galleryid parameter to view.php and 2 imageid parameter to image.php...

CVE-2005-4245

Cross-site scripting XSS vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

Snipe Gallery 3.1.4 - search.php?keyword Cross-Site Scripting

Snipe Gallery 3.1.4 - search.php?keyword Cross-Site Scripting source: https://www.securityfocus.com/bid/15844/info Snipe Gallery is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...

Snipe Gallery 3.1.4 - 'image.php?image_id' SQL Injection

source: https://www.securityfocus.com/bid/15844/info Snipe Gallery is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could allow an attacker to...

Snipe Gallery 3.1.4 - view.php?gallery_id SQL Injection

Snipe Gallery 3.1.4 - view.php?galleryid SQL Injection source: https://www.securityfocus.com/bid/15844/info Snipe Gallery is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation o...

Snipe Gallery SQL&XSS vuln.

Snipe Gallery SQL&XSS vuln. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/snipe-gallery-sqlxss-vuln.html vendor:http://www.snipegallery.com/ affected version:3.1.4 and prior Product Description: Snipe Gallery is a searchable PHP/mySQL photo galle...

Snipe Gallery 3.1.4 - 'view.php?gallery_id' SQL Injection

source: https://www.securityfocus.com/bid/15844/info Snipe Gallery is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could allow an attacker to...