CVE-2009-4266

Cross-site scripting XSS vulnerability in search.php in YABSoft Advanced Image Hosting AIH Script 2.2, and possibly 2.3, allows remote attackers to inject arbitrary web script or HTML via the text parameter...

CVE-2009-4266

Cross-site scripting XSS vulnerability in search.php in YABSoft Advanced Image Hosting AIH Script 2.2, and possibly 2.3, allows remote attackers to inject arbitrary web script or HTML via the text parameter...

CVE-2009-4266

CVE-2009-4266 is a Cross-Site Scripting (XSS) vulnerability in the YABSoft AIHS Script, affecting search.php. The issue allows remote attackers to inject arbitrary web script or HTML via the text parameter in AIHS Script 2.2 (and possibly 2.3). The vulnerability is documented with a MEDIUM severi...

CVE-2009-3647

Cross-site scripting XSS vulnerability in emaullinks.php in YABSoft Mega File Hosting Script aka MFH or MFHS 1.2 allows remote attackers to inject arbitrary web script or HTML via the moudi parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

Cross site scripting

Cross-site scripting XSS vulnerability in emaullinks.php in YABSoft Mega File Hosting Script aka MFH or MFHS 1.2 allows remote attackers to inject arbitrary web script or HTML via the moudi parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2009-3647

Cross-site scripting XSS vulnerability in emaullinks.php in YABSoft Mega File Hosting Script aka MFH or MFHS 1.2 allows remote attackers to inject arbitrary web script or HTML via the moudi parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2009-3647

CVE-2009-3647 describes a cross-site scripting (XSS) vulnerability in the YABSoft Mega File Hosting Script (MFH/MFHS) 1.2, where an attacker can inject arbitrary web script or HTML via the moudi parameter in emaullinks.php. The evidence in connected sources confirms the affected component and the...

CVE-2009-1032

SQL injection vulnerability in gallerylist.php in YABSoft Advanced Image Hosting AIH Script 2.3 allows remote attackers to execute arbitrary SQL commands via the gal parameter...

Sql injection

SQL injection vulnerability in gallerylist.php in YABSoft Advanced Image Hosting AIH Script 2.3 allows remote attackers to execute arbitrary SQL commands via the gal parameter...

CVE-2009-1032

SQL injection vulnerability in gallerylist.php in YABSoft Advanced Image Hosting AIH Script 2.3 allows remote attackers to execute arbitrary SQL commands via the gal parameter...

CVE-2009-1032

CVE-2009-1032 refers to a SQL injection vulnerability in gallery_list.php of YABSoft Advanced Image Hosting (AIHS) Script 2.3 , where the gal parameter can be exploited to execute arbitrary SQL commands. Multiple sources (NVD, OpenVAS entries) corroborate that this vulnerability affects the AIHS,...

CVE-2009-0966

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

Remote file inclusion

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

CVE-2009-0966

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

CVE-2009-0966

Affected product/variant: YABSoft Mega File Hosting 1.2 (cross.php). Vulnerability: PHP remote file inclusion via the url parameter in cross.php, enabling execution of arbitrary PHP code. NOTE: can also include and execute arbitrary local files using .. sequences. Impact (as documented): arbitrar...

Advanced Image Hosting 2.3 SQL Injection

Advanced Image Hosting AIH Remote Blind SQL Injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : Blind SQL injection Google Dork : Powered by: AIH v2.3 -------------------------------------------------- ! Product Name : Advanced Image Hosting ! Product Site :...

Advanced Image Hosting (AIH) 2.3 (gal) Blind SQL Injection Vuln

No description provided by source. Advanced Image Hosting AIH Remote Blind SQL Injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : Blind SQL injection Google Dork : Powered by: AIH v2.3 -------------------------------------------------- ! Product Name : Advanced Image...

Advanced Image Hosting (AIH) 2.3 (gal) Blind SQL Injection Vuln

Exploit for unknown platform in category web applications =============================================================== Advanced Image Hosting AIH 2.3 gal Blind SQL Injection Vuln =============================================================== Advanced Image Hosting AIH Remote Blind SQL Injecti...

Advanced Image Hosting (AIH) 2.3 - gal Blind SQL Injection

Advanced Image Hosting AIH 2.3 - gal Blind SQL Injection Advanced Image Hosting AIH Remote Blind SQL Injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : Blind SQL injection Google Dork : Powered by: AIH v2.3 -------------------------------------------------- ! Product...

Advanced Image Hosting (AIH) 2.3 - 'gal' Blind SQL Injection

Advanced Image Hosting AIH Remote Blind SQL Injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : Blind SQL injection Google Dork : Powered by: AIH v2.3 -------------------------------------------------- ! Product Name : Advanced Image Hosting ! Product Site :...