CVE-2024-30925

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

CVE-2024-30925

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

CVE-2024-30925

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

CVE-2024-30925: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

CVE-2024-30925

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

CVE-2024-30925

DerbyNet versions 9.0 and below are vulnerable to a Cross-Site Scripting (XSS) flaw in the photo-thumbs.php component. The root cause is the improper validation of user-supplied input, specifically within the racerid parameter. An attacker could exploit this to execute arbitrary code or steal a v...

CVE-2024-30925

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

PT-2019-6894

Name of the Vulnerable Software and Affected Versions Mambo CMS version 4.6.5 Description A vulnerability in the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver. Recommendations For Mambo CMS version 4.6.5, consider restricting...

CVE-2013-2565: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver...

windowcanvas.com XSS vulnerability

Vulnerable URL: http://www.windowcanvas.com/thumbs.php?limit=15=6=1"...

clearvuegraphics.com XSS vulnerability

Vulnerable URL: http://www.clearvuegraphics.com/thumbs.php?limit=15=23=1"...

PT-2011-1810

Name of the Vulnerable Software and Affected Versions Vodpod Video Gallery Plugin version 3.1.5 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the gid parameter in the vodpod-gallery/vodpod galler...

thumbs.php

A problem has been discovered with thumbs.php providing access to unwanted files Component Type: TYPO3 Core Affected Versions: ALL Vulnerability Type: Image Access Severity: minor Problem Description: TYPO3 uses a script t3lib/thumbs.php to display thumbnails of images and/or PDF documents. It ha...

CVE-2006-6118

CVE-2006-6118 describes a cross-site scripting (XSS) flaw in mmgallery 1.55, specifically in the thumbs.php script where the vulnerable input is the page parameter. The root cause is insufficient sanitization/validation of the page value, allowing a remote attacker to inject arbitrary web script ...

CVE-2006-6119: Undefined Security Weakness

mmgallery 1.55 allows remote attackers to obtain sensitive information via a direct request for thumbs.php, which reveals the installation path in various error messages...

CVE-2006-6118: Undefined Security Weakness

Cross-site scripting XSS vulnerability in thumbs.php in mmgallery 1.55 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

mmgallery Multiple vulnerabilities

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ;;ii,,:: + + :::: :: ;;tt;;:: + + ;;:: ..,,:: ;;ii,,:: + + ,,,, ii;;,, ii;;:: ;;ii,,:: + + ii:: tt;;,, ..tt;;,,.. ;;ii;;:: + + ii,,:: ttii,, ..ff;;;;:: ;;ii;;:: + + tt;;::..,, tt;;,, ff;;;;...

CVE-2006-0327: Undefined Security Weakness

TYPO3 3.7.1 allows remote attackers to obtain sensitive information via a direct request to 1 thumbs.php, 2 showpic.php, or 3 tables.php, which causes them to incorrectly define a variable and reveal the path in an error message when a require function call fails...

Typo3 3.5 b5 - showpic.php File Enumeration

Typo3 3.5 b5 - showpic.php File Enumeration source: https://www.securityfocus.com/bid/6982/info TYPO3 is prone to a vulnerability that will allow remote attackers to enumerate whether or not files exist on the system hosting the software. This issue exists in the 'showpic.php' and 'thumbs.php'...

Typo3 3.5 b5 - 'showpic.php' File Enumeration

source: https://www.securityfocus.com/bid/6982/info TYPO3 is prone to a vulnerability that will allow remote attackers to enumerate whether or not files exist on the system hosting the software. This issue exists in the 'showpic.php' and 'thumbs.php' scripts. This type of information may be usefu...