Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2016-4337

Disclosure Date: April 12, 2017 (last updated November 26, 2024)
SQL injection vulnerability in the mgr.login.php file in Ktools.net Photostore before 4.7.5 allows remote attackers to execute arbitrary SQL commands via the email parameter in a recover_login action.
0
0
Attacker Value
Unknown

CVE-2008-6648

Disclosure Date: April 07, 2009 (last updated October 04, 2023)
SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter to about_us.php. NOTE: this might be the same issue as CVE-2008-6647.
0
0
Attacker Value
Unknown

CVE-2008-6649

Disclosure Date: April 07, 2009 (last updated October 04, 2023)
SQL injection vulnerability in manager/image_details_editor.php in Ktools PhotoStore 2.5, 2.9.8, 3.1.0, and other versions through 3.5.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
0
0
Attacker Value
Unknown

CVE-2008-6647

Disclosure Date: April 07, 2009 (last updated October 04, 2023)
SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to execute arbitrary SQL commands via the gid parameter.
0
0
Attacker Value
Unknown

CVE-2006-5057

Disclosure Date: September 28, 2006 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary web script or HTML via the (1) gid parameter in details.php, or the (2) photogid parameter in view_photog.php.
0
0