22 matches found
CVE-2026-32418
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Jordy Meow Meow Gallery meow-gallery allows Blind SQL Injection.This issue affects Meow Gallery: from n/a through = 5.4.4...
CVE-2016-10889
The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name...
EUVD-2003-1217
Malware in sbrugna...
EUVD-2008-5273
Malware in sbrugna...
EUVD-2004-2116
Malware in sbrugna...
EUVD-2025-5735
Malicious code in bioql PyPI...
CVE-2025-49897
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus Vertical scroll slideshow gallery v2 allows Blind SQL Injection. This issue affects Vertical scroll slideshow gallery v2: from n/a through 9.1...
CVE-2025-49897 WordPress Vertical scroll slideshow gallery v2 plugin <= 9.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus Vertical scroll slideshow gallery v2 allows Blind SQL Injection. This issue affects Vertical scroll slideshow gallery v2: from n/a through 9.1...
CVE-2025-49897
CVE-2025-49897 affects the WordPress plugin Vertical scroll slideshow gallery v2 (versions
CVE-2023-30725
Improper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows attacker to access the data in content provider...
CVE-2021-25379
Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action...
Samsung Gallery 安全漏洞
Samsung Gallery is an application from Samsung South Korea. The best image and video viewing application for Galaxy users. An elevation of privilege vulnerability exists in Gallery versions prior to 5.4.16.1, which can be exploited by an attacker to perform privileged operations...
Unauthorized Access Vulnerability in Gallery 27.0, Qixing Image Library (CNVD-2020-00193)
Qixing Image GalleryGallery is mainly used to store images or videos in the company. An unauthorized access vulnerability exists in Qixing Image Library Gallery 27.0, which can be exploited by attackers to obtain sensitive information...
Fedora 18 : gallery3-3.0.9-1.fc18 (2013-12424)
Fixes for CVE-2013-2240, CVE-2013-2241. A security flaw was found in the way flowplayer SWF file handling functionality of Gallery version 3, an open source project with the goal to develop and support leading photo sharing web application solutions, processed certain URL fragments passed to this...
Fedora 17 : gallery3-3.0.9-1.fc17 (2013-12441)
Fixes for CVE-2013-2240, CVE-2013-2241. A security flaw was found in the way flowplayer SWF file handling functionality of Gallery version 3, an open source project with the goal to develop and support leading photo sharing web application solutions, processed certain URL fragments passed to this...
Fedora 19 : gallery3-3.0.9-1.fc19 (2013-12384)
Fixes for CVE-2013-2240, CVE-2013-2241. A security flaw was found in the way flowplayer SWF file handling functionality of Gallery version 3, an open source project with the goal to develop and support leading photo sharing web application solutions, processed certain URL fragments passed to this...
Fedora 19 : gallery3-3.0.8-1.fc19 (2013-10032)
A security flaw was found in the way uploadify and flowplayer SWF files handling functionality of Gallery version 3, an open source project with the goal to develop and support leading photo sharing web application solutions, processed certain URL fragments passed to these files certain URL...
SQL INJECTION VULNERABILITIES--ST-Gallery version 0.1 alpha-->
----------------------------------------------------------------- SQL INJECTION VULNERABILITIES--ST-Gallery version 0.1 alpha-- ----------------------------------------------------------------- CMS INFORMATION: --WEB: http://blog.sebastian-thiele.net/projekte/gallery/ --DOWNLOAD:...
CVE-2008-5296
Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when registerglobals is enabled, allows remote attackers to bypass authentication and gain administrative via unspecified cookies. NOTE: some of these details are obtained from third party information...
Directory traversal
Gallery before 1.5.9, and 2.x before 2.2.6, does not properly handle ZIP archives containing symbolic links, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files via vectors related to the archive upload aka zip upload functionality...