Snipe Photo Gallery - Bypass Arbitrary File Upload

Snipe Photo Gallery - Bypass Arbitrary File Upload ======================================================================================== | Title : Snipe Photo Gallery by Pass Remote Upload Vulnerability | Author : indoushka | Home : www.dz-blackhat.com | Tested on: Lunix Français v.9.4 Ubuntu ...

CVE-2006-1826

Multiple cross-site scripting XSS vulnerabilities in Snipe Gallery 3.1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 galleryid parameter in view.php, 2 keyword parameter in search.php, and 3 imageid parameter in image.php. NOTE: it is possible that vectors ...

CVE-2006-1826

CVE-2006-1826 describes multiple cross-site scripting (XSS) vulnerabilities in Snipe Gallery 3.1.4 and earlier . The affected parameters are: (1) gallery_id in view.php, (2) keyword in search.php, and (3) image_id in image.php. The description notes that vectors 1 and 3 may stem from SQL injectio...

CVE-2006-1826

Multiple cross-site scripting XSS vulnerabilities in Snipe Gallery 3.1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 galleryid parameter in view.php, 2 keyword parameter in search.php, and 3 imageid parameter in image.php. NOTE: it is possible that vectors ...

Snipe Gallery <= 3.1.4 Multiple XSS

Snipe Gallery = 3.1.4 Multiple XSS http://www.SITE.com/PATH/view.php?galleryid='scriptalertdocument.cookie/script http://www.SITE.com/PATH/search.php?keyword='scriptalertdocument.cookie/script&searchcat=&searchtype=and...

CVE-2005-4244

SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 galleryid parameter to view.php and 2 imageid parameter to image.php...

CVE-2005-4245

Cross-site scripting XSS vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

CVE-2005-4244

The vulnerability CVE-2005-4244 affects Snipe Gallery 3.1.4 and earlier. It is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the gallery_id parameter to view.php and the image_id parameter to image.php. Details indicate an injection flaw in how ...

CVE-2005-4244

SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 galleryid parameter to view.php and 2 imageid parameter to image.php...

CVE-2005-4245

Cross-site scripting XSS vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

CVE-2005-4245

CVE-2005-4245 is a cross-site scripting (XSS) vulnerability in Snipe Gallery 3.1.4 and earlier affecting the file search.php . The issue arises from the keyword parameter, allowing remote attackers to inject arbitrary web script or HTML. According to the record, the impact is confidentiality: non...

Snipe Gallery 3.1.4 - search.php?keyword Cross-Site Scripting

Snipe Gallery 3.1.4 - search.php?keyword Cross-Site Scripting source: https://www.securityfocus.com/bid/15844/info Snipe Gallery is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...

Snipe Gallery 3.1.4 - 'image.php?image_id' SQL Injection

source: https://www.securityfocus.com/bid/15844/info Snipe Gallery is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could allow an attacker to...

Snipe Gallery SQL&XSS vuln.

Snipe Gallery SQL&XSS vuln. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/snipe-gallery-sqlxss-vuln.html vendor:http://www.snipegallery.com/ affected version:3.1.4 and prior Product Description: Snipe Gallery is a searchable PHP/mySQL photo galle...

Snipe Gallery 3.1.4 - view.php?gallery_id SQL Injection

Snipe Gallery 3.1.4 - view.php?galleryid SQL Injection source: https://www.securityfocus.com/bid/15844/info Snipe Gallery is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation o...

Snipe Gallery 3.1.4 - 'view.php?gallery_id' SQL Injection

source: https://www.securityfocus.com/bid/15844/info Snipe Gallery is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could allow an attacker to...