Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		16.03.2007
Source:
SecurityVulns ID:		7412
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		FTPLOCATE : FtpLocate 2.02
		ABSOLUTE : Absolute Image Gallery 2.0
CVE:		CVE-2007-1469 (SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action.)

Original document		drackanz_(at)_gmail.com, WebCalendar v0.9.45 (13 Dec 2004) (login.php) Remote File include (16.03.2007)
		Uniqu3 Cr4ck, Absolute Image Gallery Gallery.ASP (categoryid) MSSQL Injection Exploit (16.03.2007)
		MustLive, Vulnerabilities â FtpLocate (16.03.2007)

Files:		Absolute Image Gallery MSSQL CMD Injection Exploit
Discuss:		Read or add your comments to this news (0 comments)