CVE

Id
18184  
CVE No.
CVE-2006-2080  
Status
Candidate  
Description
SQL injection vulnerability in portfolio_photo_popup.php in Verosky Media Instant Photo Gallery 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, which is not cleansed before calling the count_click function in includes/functions/fns_std.php. NOTE: this issue could produce resultant XSS.  
Phase
Assigned (20060427)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
156785 18184 CVE-2006-2080 BUGTRAQ:20060425 Instant Photo Gallery <= Multiple XSS  View
156786 18184 CVE-2006-2080 URL:http://www.securityfocus.com/archive/1/432024/100/0/threaded  View
156787 18184 CVE-2006-2080 BUGTRAQ:20060427 Re: Instant Photo Gallery <= Multiple XSS  View
156788 18184 CVE-2006-2080 URL:http://www.securityfocus.com/archive/1/archive/1/432241/100/0/threaded  View
156789 18184 CVE-2006-2080 VIM:20060427 Instant Photo Gallery <= Multiple XSS (fwd)  View
156790 18184 CVE-2006-2080 URL:http://attrition.org/pipermail/vim/2006-April/000733.html  View
156791 18184 CVE-2006-2080 BID:17696  View
156792 18184 CVE-2006-2080 URL:http://www.securityfocus.com/bid/17696  View
156793 18184 CVE-2006-2080 VUPEN:ADV-2006-1533  View
156794 18184 CVE-2006-2080 URL:http://www.vupen.com/english/advisories/2006/1533  View
156795 18184 CVE-2006-2080 OSVDB:24986  View
156796 18184 CVE-2006-2080 URL:http://www.osvdb.org/24986  View
156797 18184 CVE-2006-2080 OSVDB:24987  View
156798 18184 CVE-2006-2080 URL:http://www.osvdb.org/24987  View
156799 18184 CVE-2006-2080 SECUNIA:19813  View
156800 18184 CVE-2006-2080 URL:http://secunia.com/advisories/19813  View
156801 18184 CVE-2006-2080 SREASON:803  View

Related JVN