CVE-2024-30925

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

CVE-2024-30925

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

CVE-2024-30925

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

CVE-2024-30925

Summary (CVE-2024-30925): DerbyNet versions 9.0 and below contain a Cross Site Scripting vulnerability in the photo-thumbs.php component that can lead to arbitrary code execution. The issue stems from insufficient input handling for certain parameters (notably racerid and back) used to generate n...

CVE-2024-30925

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

windowcanvas.com XSS vulnerability

Vulnerable URL: http://www.windowcanvas.com/thumbs.php?limit=15=6=1"...

clearvuegraphics.com XSS vulnerability

Vulnerable URL: http://www.clearvuegraphics.com/thumbs.php?limit=15=23=1"...

thumbs.php

A problem has been discovered with thumbs.php providing access to unwanted files Component Type: TYPO3 Core Affected Versions: ALL Vulnerability Type: Image Access Severity: minor Problem Description: TYPO3 uses a script t3lib/thumbs.php to display thumbnails of images and/or PDF documents. It ha...

CVE-2006-6118

CVE-2006-6118 describes a cross-site scripting (XSS) flaw in mmgallery 1.55, specifically in the thumbs.php script where the vulnerable input is the page parameter. The root cause is insufficient sanitization/validation of the page value, allowing a remote attacker to inject arbitrary web script ...

mmgallery Multiple vulnerabilities

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ;;ii,,:: + + :::: :: ;;tt;;:: + + ;;:: ..,,:: ;;ii,,:: + + ,,,, ii;;,, ii;;:: ;;ii,,:: + + ii:: tt;;,, ..tt;;,,.. ;;ii;;:: + + ii,,:: ttii,, ..ff;;;;:: ;;ii;;:: + + tt;;::..,, tt;;,, ff;;;;...

Typo3 3.5 b5 - showpic.php File Enumeration

Typo3 3.5 b5 - showpic.php File Enumeration source: https://www.securityfocus.com/bid/6982/info TYPO3 is prone to a vulnerability that will allow remote attackers to enumerate whether or not files exist on the system hosting the software. This issue exists in the 'showpic.php' and 'thumbs.php'...

Typo3 3.5 b5 - 'showpic.php' File Enumeration

source: https://www.securityfocus.com/bid/6982/info TYPO3 is prone to a vulnerability that will allow remote attackers to enumerate whether or not files exist on the system hosting the software. This issue exists in the 'showpic.php' and 'thumbs.php' scripts. This type of information may be usefu...