CVE-2022-50806

CVE-2022-50806 affects 4images 1.9. The vulnerability is a remote command execution where authenticated administrators can inject reverse shell code through the template editing feature and execute commands via categories.php with a crafted cat_id parameter. Exploitation details and affected comp...

4Images SQL Injection Vulnerability

4images is a web-based image gallery management system. An SQL injection vulnerability exists in the orderby parameter of the validateimages.php page in 4Images 1.7.13 and prior versions, which can be exploited by an attacker to compromise an application, access or modify data, or exploit a...

CVE-2009-2132

Directory traversal vulnerability in global.php in 4images before 1.7.7, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the l parameter...