Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown

CVE-2005-1629

Disclosure Date: May 17, 2005 (last updated February 22, 2025)
SQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to execute arbitrary SQL commands via the verifykey parameter.
0
0
Attacker Value
Unknown

CVE-2005-0777

Disclosure Date: May 02, 2005 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP 5.0 RC3 allow remote attackers to inject arbitrary web script or HTML via (1) the check_tags function or (2) the editbio field in the user profile.
0
0
Attacker Value
Unknown

CVE-2005-0778

Disclosure Date: May 02, 2005 (last updated February 22, 2025)
PhotoPost PHP 5.0 RC3 does not fully verify that an uploaded file is an image file, which allows remote attackers to inject arbitrary Javascript by uploading non-image files with an image extension such as .gif.
0
0
Attacker Value
Unknown

CVE-2005-0775

Disclosure Date: May 02, 2005 (last updated February 22, 2025)
The reportpost action in misc.php for PhotoPost PHP 5.0 RC3 does not limit the logging data that is sent to the administrator, which allows remote attackers to send large amounts of email to the administrator.
0
0
Attacker Value
Unknown

CVE-2005-0776

Disclosure Date: May 02, 2005 (last updated February 22, 2025)
adm-photo.php in PhotoPost PHP 5.0 RC3 does not properly verify administrative privileges before manipulating photos, which could allow remote attackers to manipulate other users' photos.
0
0
Attacker Value
Unknown

CVE-2005-0774

Disclosure Date: March 10, 2005 (last updated February 22, 2025)
SQL injection vulnerability in member.php and possibly other scripts in PhotoPost PHP 5.0 RC3 allows remote attackers to execute arbitrary SQL commands via the uid parameter.
0
0