EUVD-2008-2516

Malware in sbrugna...

EUVD-2009-4235

Malware in sbrugna...

EUVD-2008-2531

Malware in sbrugna...

EUVD-2009-0963

Malware in sbrugna...

EUVD-2012-5913

Malware in sbrugna...

EUVD-2009-1033

Malware in sbrugna...

EUVD-2009-3622

Malware in sbrugna...

CVE-2012-6039

SQL injection vulnerability in viewcomments.php in YABSoft Advanced Image Hosting AIH Script, possibly 2.3, allows remote attackers to execute arbitrary SQL commands via the gal parameter...

YABSoft Advanced Image Hosting Script 2.x 'search.php' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37233/info YABSoft Advanced Image Hosting Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

CVE-2012-6039

SQL injection vulnerability in viewcomments.php in YABSoft Advanced Image Hosting AIH Script, possibly 2.3, allows remote attackers to execute arbitrary SQL commands via the gal parameter...

Sql injection

SQL injection vulnerability in viewcomments.php in YABSoft Advanced Image Hosting AIH Script, possibly 2.3, allows remote attackers to execute arbitrary SQL commands via the gal parameter...

CVE-2012-6039

SQL injection vulnerability in viewcomments.php in YABSoft Advanced Image Hosting AIH Script, possibly 2.3, allows remote attackers to execute arbitrary SQL commands via the gal parameter...

CVE-2012-6039

CVE-2012-6039 affects the YABSoft Advanced Image Hosting (AIH) Script, likely version 2.3. The vulnerability is a SQL injection in view_comments.php exploitable via the gal parameter, enabling remote attackers to execute arbitrary SQL commands. Root cause is an input-driven SQL query without prop...

CVE-2012-6039: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewcomments.php in YABSoft Advanced Image Hosting AIH Script, possibly 2.3, allows remote attackers to execute arbitrary SQL commands via the gal parameter...

PT-2012-6230

Name of the Vulnerable Software and Affected Versions YABSoft Advanced Image Hosting AIH Script version 2.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the gal parameter in the view comments.php file. Recommendations For version 2.3, updat...

YABSoft Advanced Image Hosting Script SQL Injection

Exploit Title: AIHS Advanced Image Hosting Script SQL Injection Vulnerability Author: Robert Cooper Robert.Cooper at areyousecure.net Software Link: http://yabsoft.com/ Tested on: Linux/Windows 7 Vulnerable File: viewcomments.php Vulnerable parameter: viewcomments.php?gal=gallery id PoC:...

YABSoft Advanced Image Hosting Script 'report.php' Cross Site Scripting Vulnerability

YABSoft Advanced Image Hosting Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user- supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...

YABSoft Advanced Image Hosting Script 'report.php' Cross Site Scripting Vulnerability

YABSoft Advanced Image Hosting Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Advanced Image Hosting Script 2.3 - report.php Cross-Site Scripting

Advanced Image Hosting Script 2.3 - report.php Cross-Site Scripting source: https://www.securityfocus.com/bid/49457/info YABSoft Advanced Image Hosting Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

Advanced Image Hosting Script 2.3 - 'report.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49457/info YABSoft Advanced Image Hosting Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...