Vulnerabilities > Uapplication > High

DATE CVE VULNERABILITY TITLE RISK
2007-02-06 CVE-2007-0799 SQL-Injection vulnerability in Uapplication Ublog Reload1.0.5
SQL injection vulnerability in badword.asp in Ublog Reload 1.0.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
network
low complexity
uapplication
7.5
2006-12-04 CVE-2006-6247 SQL Injection vulnerability in Uapplication Uphotogallery 1.1
Multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1 allow remote attackers to execute arbitrary SQL commands via the ci parameter to (1) slideshow.asp or (2) thumbnails.asp.
network
low complexity
uapplication
7.5
2005-05-03 CVE-2005-1428 File-Upload vulnerability in Uapplication Uphotogallery
edit_image.asp in Uapplication Uphotogallery allows remote attackers to upload arbitrary files.
network
low complexity
uapplication
7.5
2005-05-03 CVE-2005-1427 Information Disclosure vulnerability in uPhotoGallery
Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request to uphotogallery.mdb.
network
low complexity
uapplication
7.5