Lucene search
+L

11774 matches found

CNNVD
CNNVD
added 2023/03/16 12:00 a.m.8 views

Simple Image Gallery 注入漏洞

Simple Image Gallery Web App is a web-based application that can be managed by multiple users. Users can store their images in this web application. A security vulnerability exists in Simple Image Gallery v1.0 that stems from a Remote Code Execution RCE vulnerability...

9.8CVSS8.5AI score0.01982EPSS
SaveExploits1References3
CVE
CVE
added 2023/03/16 12:00 a.m.64 views

CVE-2023-27040

CVE-2023-27040 affects Simple Image Gallery v1.0, with a remote code execution (RCE) vulnerability exploitable via the username parameter. Connected sources confirm the issue leads to high-impact outcomes (CONFIDENTIALITY, INTEGRITY, AVAILABILITY all at HIGH) and indicate network-level access wit...

9.8CVSS9.8AI score0.01982EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2023/03/16 12:00 a.m.14 views

WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Slideshow Gallery Type Plugin Vulnerable versions = 1.7.6 Fixed in 1.7.7 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-28497 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID e4370ac72e5b Credits Rio Darmawan...

8.8CVSS6.7AI score0.00284EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/16 12:00 a.m.6 views

CVE-2023-27040

Simple Image Gallery v1.0 was discovered to contain a remote code execution RCE vulnerability via the username parameter...

9.9AI score0.01982EPSS
SaveExploits1References1
Patchstack
Patchstack
added 2023/03/16 12:00 a.m.19 views

WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to SQL Injection

Software Slideshow Gallery Type Plugin Vulnerable versions = 1.7.6 Fixed in 1.7.7 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-28491 Patch priority Low CVSS severity Low 6.7 Developer Claim ownership PSID 9644393e25c7 Credits minhtuanact Required privilege Administrator...

7.2CVSS6.9AI score0.00762EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/16 12:00 a.m.12 views

PT-2023-20913 · Unknown · Simple Image Gallery

Name of the Vulnerable Software and Affected Versions: Simple Image Gallery version 1.0 Description: The issue is related to a remote code execution RCE vulnerability. This vulnerability can be exploited via the username parameter. Recommendations: For Simple Image Gallery version 1.0, as a...

9.8CVSS7.9AI score0.01982EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2023/03/16 12:00 a.m.34 views

CVE-2023-27040

Simple Image Gallery v1.0 was discovered to contain a remote code execution RCE vulnerability via the username parameter...

10AI score0.01982EPSS
SaveExploits1References1
OSV
OSV
added 2023/03/15 4:15 p.m.8 views

CVE-2023-1416

A vulnerability classified as critical has been found in Simple Art Gallery 1.0. Affected is an unknown function of the file adminHome.php. The manipulation of the argument socialfacebook leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

9.8CVSS5.7AI score0.00763EPSS
SaveExploits1References3
OSV
OSV
added 2023/03/15 4:15 p.m.9 views

CVE-2023-1415

A vulnerability was found in Simple Art Gallery 1.0. It has been declared as critical. This vulnerability affects the function sliderPicSubmit of the file adminHome.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-223126 is the identifier assigned to...

8.8CVSS5.5AI score0.01026EPSS
SaveExploits1References3
NVD
NVD
added 2023/03/15 4:15 p.m.37 views

CVE-2023-1415

A vulnerability was found in Simple Art Gallery 1.0. It has been declared as critical. This vulnerability affects the function sliderPicSubmit of the file adminHome.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-223126 is the identifier assigned to...

8.8CVSS7AI score0.01026EPSS
SaveExploits1References3
Prion
Prion
added 2023/03/15 4:15 p.m.24 views

Sql injection

A vulnerability classified as critical has been found in Simple Art Gallery 1.0. Affected is an unknown function of the file adminHome.php. The manipulation of the argument socialfacebook leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

6.5CVSS9.8AI score0.00763EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2023/03/15 4:15 p.m.28 views

Design/Logic Flaw

A vulnerability was found in Simple Art Gallery 1.0. It has been declared as critical. This vulnerability affects the function sliderPicSubmit of the file adminHome.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-223126 is the identifier assigned to...

6.5CVSS8.6AI score0.01026EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/03/15 3:13 p.m.33 views

CVE-2023-1416 Simple Art Gallery adminHome.php sql injection

A vulnerability classified as critical has been found in Simple Art Gallery 1.0. Affected is an unknown function of the file adminHome.php. The manipulation of the argument socialfacebook leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

6.5CVSS10AI score0.00763EPSS
SaveExploits1References3
CVE
CVE
added 2023/03/15 3:13 p.m.111 views

CVE-2023-1416

Affected software: Simple Art Gallery 1.0. The vulnerability exists in the function handling the adminHome.php file, where manipulation of the social_facebook parameter causes SQL injection. It can be exploited remotely and an exploit has been disclosed publicly (VDB-223128). The provided documen...

9.8CVSS8.4AI score0.00763EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/15 3:00 p.m.12 views

CVE-2023-1415 Simple Art Gallery adminHome.php sliderPicSubmit unrestricted upload

A vulnerability was found in Simple Art Gallery 1.0. It has been declared as critical. This vulnerability affects the function sliderPicSubmit of the file adminHome.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-223126 is the identifier assigned to...

6.5CVSS6.9AI score0.01026EPSS
SaveExploits1References3
CVE
CVE
added 2023/03/15 3:00 p.m.122 views

CVE-2023-1415

CVE-2023-1415 affects Simple Art Gallery 1.0. The vulnerability resides in sliderPicSubmit in adminHome.php, enabling unrestricted file uploads and remote initiation. Product is Software: Simple Art Gallery 1.0; Component: sliderPicSubmit (adminHome.php); Root cause: improper handling of uploads ...

8.8CVSS7AI score0.01026EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/03/15 3:00 p.m.50 views

CVE-2023-1415 Simple Art Gallery adminHome.php sliderPicSubmit unrestricted upload

A vulnerability was found in Simple Art Gallery 1.0. It has been declared as critical. This vulnerability affects the function sliderPicSubmit of the file adminHome.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-223126 is the identifier assigned to...

6.5CVSS8.9AI score0.01026EPSS
SaveExploits1References3
NVD
NVD
added 2023/03/15 2:15 p.m.28 views

CVE-2023-24726

Art Gallery Management System v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter on the enquiry page...

9.8CVSS9.8AI score0.01125EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2023/03/15 2:15 p.m.4 views

CVE-2023-24726

Art Gallery Management System v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter on the enquiry page...

9.8CVSS5.9AI score0.01125EPSS
SaveExploits1References4
OSV
OSV
added 2023/03/15 2:15 p.m.11 views

CVE-2023-24726

Art Gallery Management System v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter on the enquiry page...

9.8CVSS5.8AI score0.01125EPSS
SaveExploits1References3
Rows per page
Query Builder