CVE-2019-25516

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the galleryid parameter. Attackers can send GET requests to gallery.php with malicious galleryid values using...

CVE-2019-25516: Improper Neutralization of Special Elements used in an SQL Command

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the galleryid parameter. Attackers can send GET requests to gallery.php with malicious galleryid values using...

EUVD-2006-3023

Malware in sbrugna...

CVE-2021-24291: Improper Neutralization of Input During Web Page Generation

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.69 was vulnerable to Reflected Cross-Site Scripting XSS issues via the galleryid, tag, albumid and id GET parameters passed to the bwgfrontenddata AJAX action available to both unauthenticated and authenticated...

Sql injection

SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...

CVE-2018-5981

SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...

CVE-2018-5981: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...

CVE-2009-3975

The CVE-2009-3975 entry concerns Moa Gallery (versions 1.1.0 and 1.2.0). The vulnerability is a SQL injection in index.php, exploitable via the gallery_view action’s gallery_id parameter, allowing remote attackers to execute arbitrary SQL commands. Severity in NVD is Medium (CVSS v2: AV:N/AC:M/Au...

CVE-2009-3975: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Moa Gallery 1.1.0 and 1.2.0 allows remote attackers to execute arbitrary SQL commands via the galleryid parameter in a galleryview action...

CVE-2006-6187: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ClickTech Click Gallery allow remote attackers to execute arbitrary SQL commands via the 1 currentpage or 2 galleryid parameter to a viewgallery.asp, the 3 imageid parameter to b downloadimage.asp, the currentpage or 5 orderby parameter to c gallery.asp, ...

CVE-2006-3026

Multiple cross-site scripting XSS vulnerabilities in ClickGallery 5.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 galleryid parameter in gallery.asp and 2 parentcurrentpage parameter in viewgallery.asp...

CVE-2006-1826: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Snipe Gallery 3.1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 galleryid parameter in view.php, 2 keyword parameter in search.php, and 3 imageid parameter in image.php. NOTE: it is possible that vectors ...

CVE-2005-4244: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 galleryid parameter to view.php and 2 imageid parameter to image.php...