EUVD-2005-1431

Malware in sbrugna...

UApplication UGuestbook 1.0 Index.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21426/info Uapplication Uguestbook is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

CVE-2007-0815

Cross-site scripting XSS vulnerability in imagesarchive.asp in Uapplication Uphotogallery 1.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the s parameter. NOTE: the thumbnails.asp vector is already covered by CVE-2006-3023...

Cross site scripting

Cross-site scripting XSS vulnerability in imagesarchive.asp in Uapplication Uphotogallery 1.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the s parameter. NOTE: the thumbnails.asp vector is already covered by CVE-2006-3023...

[Aria-Security Team] uGestBook SQL Injection Vuln

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory http://www.aria-security.com/forum/showthread.php?t=64 ----------------------------------------------------------- Software: UGestbook Method: SQL INJECTION Vendor: uapplication.com...

CVE-2006-6247

CVE-2006-6247 concerns multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1. The issue allows remote attackers to execute arbitrary SQL commands through the ci parameter to slideshow.asp or thumbnails.asp. The vulnerability is within the application’s handling of input without...

UApplication Uguestbook 1.0 - 'index.asp' SQL Injection

source: https://www.securityfocus.com/bid/21426/info Uapplication Uguestbook is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...

UApplication Uguestbook 1.0 - index.asp SQL Injection

UApplication Uguestbook 1.0 - index.asp SQL Injection source: https://www.securityfocus.com/bid/21426/info Uapplication Uguestbook is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

CVE-2006-3023

CVE-2006-3023 describes multiple cross-site scripting (XSS) vulnerabilities in thumbnails.asp of the Uapplication Uphotogallery 1.1 (and earlier). The issue allows remote attackers to inject arbitrary web script or HTML via the (1) s and (2) block parameters. The public description confirms affec...

CVE-2005-1428

The CVE-2005-1428 entry concerns edit_image.asp in Uapplication Uphotogallery, where remote attackers can upload arbitrary files. The vulnerability enables an attacker to affect confidentiality, integrity, and availability (C/P/I/P), with a CVSSv2 base score of 7.5 (NETWORK vector, low attack com...