5 matches found
CVE-2019-25516
Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the galleryid parameter. Attackers can send GET requests to gallery.php with malicious galleryid values using...
EUVD-2006-3023
Malware in sbrugna...
Sql injection
SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...
CVE-2018-5981
SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...
CVE-2009-3975
The CVE-2009-3975 entry concerns Moa Gallery (versions 1.1.0 and 1.2.0). The vulnerability is a SQL injection in index.php, exploitable via the gallery_view action’s gallery_id parameter, allowing remote attackers to execute arbitrary SQL commands. Severity in NVD is Medium (CVSS v2: AV:N/AC:M/Au...