Show filters
9 Total Results
Displaying 1-9 of 9
Sort by:
Attacker Value
Unknown
CVE-2016-4337
Disclosure Date: April 12, 2017 (last updated November 26, 2024)
SQL injection vulnerability in the mgr.login.php file in Ktools.net Photostore before 4.7.5 allows remote attackers to execute arbitrary SQL commands via the email parameter in a recover_login action.
0
Attacker Value
Unknown
CVE-2008-6815
Disclosure Date: May 28, 2009 (last updated October 04, 2023)
mykdownload.php in MyKtools 2.4 does not require administrative authentication, which allows remote attackers to read a database backup by making a direct request, and then sending an unspecified request to the download page for the backup.
0
Attacker Value
Unknown
CVE-2008-6648
Disclosure Date: April 07, 2009 (last updated October 04, 2023)
SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter to about_us.php. NOTE: this might be the same issue as CVE-2008-6647.
0
Attacker Value
Unknown
CVE-2008-6649
Disclosure Date: April 07, 2009 (last updated October 04, 2023)
SQL injection vulnerability in manager/image_details_editor.php in Ktools PhotoStore 2.5, 2.9.8, 3.1.0, and other versions through 3.5.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
0
Attacker Value
Unknown
CVE-2008-6647
Disclosure Date: April 07, 2009 (last updated October 04, 2023)
SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to execute arbitrary SQL commands via the gid parameter.
0
Attacker Value
Unknown
CVE-2008-6273
Disclosure Date: February 25, 2009 (last updated October 04, 2023)
Directory traversal vulnerability in configuration_script.php in MyKtools 3.0 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the langage parameter, a different vulnerability than CVE-2008-4781. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
0
Attacker Value
Unknown
CVE-2009-0363
Disclosure Date: February 17, 2009 (last updated October 04, 2023)
Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving (1) a crafted zcrypt message, related to zcrypt.c; (2) a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the products.
0
Attacker Value
Unknown
CVE-2006-5057
Disclosure Date: September 28, 2006 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary web script or HTML via the (1) gid parameter in details.php, or the (2) photogid parameter in view_photog.php.
0
Attacker Value
Unknown
CVE-2005-3863
Disclosure Date: November 29, 2005 (last updated February 22, 2025)
Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro.
0
