Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Singapore Image Gallery Multiple Remote Vulnerabilities

Singapore is prone to multiple vulnerabilities. These issues result from insufficient sanitization of user-supplied input and may allow remote attackers to carry out directory traversal, file upload, and cross-site scripting attacks.

An attacker may disclose files from a vulnerable server by issuing a malicious HTTP GET request containing directory traversal sequences.

The application is affected by an arbitrary script upload vulnerability.

An attacker can delete arbitrary files from a vulnerable computer.

The application is also vulnerable to multiple unspecified cross-site scripting issues.

Singapore 0.9.10 and prior versions are believed to be vulnerable to these vulnerabilities.







 

Privacy Statement
Copyright 2009, SecurityFocus