bugtraq - RE: Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1112047432_32079@S1.cableone.net>
Date: Mon, 28 Mar 2005 16:03:24 -0600
From: "GulfTech Security Research" <security@...ftech.org>
To: <bugtraq@...urityfocus.com>
Subject: RE: Multiple Sql injection, and multiple XSS vulnerabilities in    Photopost PHP Pro Photo Gallery Software.

The SQL Injection issue in showmembers.php (showmembers.php?si=[SQL]) was
reported to one of the lead developers Michael Pierce on March 11th 2005 by
James Bercegay of GulfTech Research And Development and has since been fixed
after being confirmed a legitimate security risk. Users with the older
vulnerable versions are urged to upgrade asap. More information can be found
on the official PhotoPost forums.

James 

-----Original Message-----
From: dcrab@...kerscenter.com [mailto:dcrab@...kerscenter.com] 
Sent: Monday, March 28, 2005 1:21 PM
To: bugtraq@...urityfocus.com
Subject: Multiple Sql injection, and multiple XSS vulnerabilities in
Photopost PHP Pro Photo Gallery Software.

Dcrab 's Security Advisory
http://icis.digitalparadox.org/~dcrab
http://www.hackerscenter.com/

Severity:  High
Title: Multiple Sql injection, and multiple XSS vulnerabilities in Photopost
PHP Pro Photo Gallery Software.
Date: March  29,  2005

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.308 / Virus Database: 266.8.3 - Release Date: 3/25/2005