6 matches found
CVE-2019-25516
The CVE-2019-25516 entry describes an SQL injection in Jettweb PHP Hazir Haber Sitesi Scripti V1, exploitable via GET requests to gallery.php with a malicious gallery_id (UNION-based) allowing unauthenticated data extraction. Metrics indicate CVSS v3.1 base score 8.2 (HIGH) and CVSS v4.0 base sco...
EUVD-2006-2119
Malware in sbrugna...
CVE-2025-0722
A vulnerability classified as critical was found in needyamin imagegallery 1.0. This vulnerability affects unknown code of the file /admin/gallery.php of the component Cover Image Handler. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. T...
image_gallery 安全漏洞
imagegallery is an image gallery management system by the individual developer Md. Yamin Hossain of Bangladesh. A security vulnerability exists in version 1.0 of imagegallery, which stems from the mishandling of the image parameter by the Cover Image Handler component in the /admin/gallery.php...
SQL Injection Vulnerability in gallery.php file of Qingdao Business-to-Signal website builder system
Qingdao business to letter network technology limited company is a long-term service in the information technology and electronic industry front high-tech position, specializing in e-commerce, website production and maintenance and database development company. There is a SQL injection...
CVE-2006-5205
Vulnerability CVE-2006-5205 affects Invision Gallery 2.0.7. A directory traversal flaw allows remote attackers to read arbitrary files via a .. sequence in the dir parameter when using the viewimage command in the gallery module (index.php and forum/index.php). Public exploit references exist (Ex...