Invision Gallery SQL Injection Exploit

Published on February 18th, 2013
Summary

Invision Gallery is prone to a SQL injection vulnerability

Credit:

Details

Vulnerable Systems:
 * Invision Gallery 2.0.5

SQLi POC:
location: site/index.php?automodule=gallery&cmd=si&img=[SQL] or

site/act=module&module=gallery&cmd=si&img=[SQL]

Disclosure Timeline:
Published: 2013-01-17

Categories: Exploits
Tags:

Related Posts

Exploits

BlueBorne Kernel version v3.3-rc1 Denial Of Service Vulnerability

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 3.3-rc1 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.

Exploits

X5 Webserver 5.0 Remote Denial Of Service Exploit

X5 is the latest generation web server from iMatix Corporation.The Xitami product line stretches back to 1996. X5 is built using iMatix's current Base2 technology for multithreading applications. On multicore machines,it is much more scalable than Xitami/2.

Exploits

E-Journal (Old Version) Multiple Vulnerabilities

E-Journal (Old Version) Multiple Vulnerabilities including; SQL Injection, Privilege Escalation and File Upload Vulnerability