Uapplication

13 CVEs across 4 Uapplication products. Browse Uapplication vulnerabilities, severities, and proof-of-concept exploits.

Uapplication products with known CVEs

ProductCVEs
Uphotogallery5
Ublog Reload4
Ublog3
Uguestbook1
Uapplication CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2007-08152007-02-07Cross-site scripting (XSS) vulnerability in images_archive.asp in Uapplication Uphotogallery 1.1 allows remote authenticated administrators to inject arbitrary…
CVE-2007-07992007-02-06SQL injection vulnerability in badword.asp in Ublog Reload 1.0.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2007-07982007-02-06Multiple cross-site scripting (XSS) vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arbitrary web script or HTML via unspecified paramet…
CVE-2006-62472006-12-04Multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1 allow remote attackers to execute arbitrary SQL commands via the ci parameter to (1) s…
CVE-2006-30232006-06-15Multiple cross-site scripting (XSS) vulnerabilities in thumbnails.asp in Uapplication Uphotogallery 1.1 and earlier allow remote attackers to inject arbitrary…
CVE-2006-22462006-05-09Cross-site scripting (XSS) vulnerability in UBlog 1.6 Access Edition allows remote attackers to inject arbitrary web script or HTML via text fields when adding…
CVE-2005-20102005-06-20Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the btitle p…
CVE-2005-14282005-05-03edit_image.asp in Uapplication Uphotogallery allows remote attackers to upload arbitrary files.
CVE-2005-14272005-05-03Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request…
CVE-2005-14262005-05-03Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a databas…
CVE-2005-14252005-05-03Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a datab…
CVE-2005-09382005-05-02Ublog Reload 1.0 through 1.0.4 stores ublogreload.mdb under the web root, which allows remote attackers to read usernames and hashed passwords via a direct req…
CVE-2005-09252005-05-02Cross-site scripting (XSS) vulnerability in login.asp for Ublog Reload 1.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the…