| To: | bugtraq@securityfocus.com |
|---|---|
| Subject: | uPhotoGallery (v 1.1) SQL Injection |
| From: | Advisory@Aria-Security.Net |
| Date: | 26 Nov 2006 20:41:04 -0000 |
| Delivered-to: | sp-com-lists@consult.net |
| Delivered-to: | bugtraq-list@securepoint.com |
| Delivered-to: | mailing list bugtraq@securityfocus.com |
| Delivered-to: | moderator for bugtraq@securityfocus.com |
| List-help: | <mailto:bugtraq-help@securityfocus.com> |
| List-id: | <bugtraq.list-id.securityfocus.com> |
| List-post: | <mailto:bugtraq@securityfocus.com> |
| List-subscribe: | <mailto:bugtraq-subscribe@securityfocus.com> |
| List-unsubscribe: | <mailto:bugtraq-unsubscribe@securityfocus.com> |
| Mailing-list: | contact bugtraq-help@securityfocus.com; run by ezmlm |
#Aria-Security Team Advisory #<www.Aria-security.Com For English > #<www.Aria-Security.net For Persian > #----------------------------------------------------------- #Software: uPhotoGallery 1.1 #Method: SQL injection # #PoC: #http://target/slideshow.asp?img_id=290&ci=[SQL Injection] #http://target/thumbnails.asp?ci=[SQL Injection] # #Contact: Advisory@aria-security.net |
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | [ GLSA 200611-22 ] Ingo H3: Folder name shell command injection, Sune Kloppenborg Jeppesen |
|---|---|
| Next by Date: | Re: [WEB SECURITY] The state of JavaScript Hacking, bugtraq |
| Previous by Thread: | [ GLSA 200611-22 ] Ingo H3: Folder name shell command injection, Sune Kloppenborg Jeppesen |
| Next by Thread: | Re: [WEB SECURITY] The state of JavaScript Hacking, bugtraq |
| Indexes: | [Date] [Thread] [Top] [All Lists] |