Show filters
180 Total Results
Displaying 161-170 of 180
Sort by:
Attacker Value
Unknown
CVE-2006-2080
Disclosure Date: April 27, 2006 (last updated October 04, 2023)
SQL injection vulnerability in portfolio_photo_popup.php in Verosky Media Instant Photo Gallery 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, which is not cleansed before calling the count_click function in includes/functions/fns_std.php. NOTE: this issue could produce resultant XSS.
0
Attacker Value
Unknown
CVE-2006-2052
Disclosure Date: April 26, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Verosky Media Instant Photo Gallery allows remote attackers to inject arbitrary web script or HTML via the member parameter in a viewpro action in member.php. NOTE: the original report may be inaccurate, since the "viewpro" string does not appear in the source code for version 1.0.2 of the product.
0
Attacker Value
Unknown
CVE-2006-1909
Disclosure Date: April 20, 2006 (last updated October 04, 2023)
Directory traversal vulnerability in index.php in Coppermine 1.4.4 allows remote attackers to read arbitrary files via a .//./ (modified dot dot slash) in the file parameter, which causes a regular expression to collapse the sequences into standard "../" sequences.
0
Attacker Value
Unknown
CVE-2006-0872
Disclosure Date: February 24, 2006 (last updated February 22, 2025)
Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files via a .. (dot dot) sequence and trailing NULL (%00) byte in the lang parameter.
0
Attacker Value
Unknown
CVE-2006-0873
Disclosure Date: February 24, 2006 (last updated February 22, 2025)
Absolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files via the f parameter, and possibly remote files using UNC share pathnames.
0
Attacker Value
Unknown
CVE-2005-3986
Disclosure Date: December 04, 2005 (last updated February 22, 2025)
Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter in portfolio.php and (2) cid parameter in content.php.
0
Attacker Value
Unknown
CVE-2005-3979
Disclosure Date: December 03, 2005 (last updated February 22, 2025)
relocate_server.php in Coppermine Photo Gallery (CPG) 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request.
0
Attacker Value
Unknown
CVE-2005-2676
Disclosure Date: August 23, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in displayimage.php in Coppermine Photo Gallery before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via EXIF data.
0
Attacker Value
Unknown
CVE-2005-2216
Disclosure Date: July 12, 2005 (last updated February 22, 2025)
PHP remote file inclusion vulnerability in gals.php in PhotoGal Photo Gallery 1.5 and earlier allows remote attackers to execute arbitrary code via the news_file parameter.
0
Attacker Value
Unknown
CVE-2005-1172
Disclosure Date: May 02, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in init.inc.php in Coppermine Photo Gallery 1.3.x allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For parameter.
0
