Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
IkemcgPhpinstantgallery

2 matches found

CVE
CVE•added 2008/05/27 2:0 p.m.•44 views

CVE-2008-2449

CVE-2008-2449 corresponds to multiple cross-site scripting (XSS) vulnerabilities in Isaac McGowan’s phpInstantGallery 2.0. The flaws allow remote attackers to inject arbitrary web script or HTML via the gallery parameter to index.php and image.php, and via the imgnum parameter to image.php. The v...

4.3CVSS5.7AI score0.01476EPSS
CVE
CVE•added 2009/12/29 8:15 p.m.•35 views

CVE-2009-4446

CVE-2009-4446 describes an XSS in phpInstantGallery 1.1 (admin.php) exploitable via PATH_INFO. Exploitation by remote attackers is possible without authentication; impacts include partial integrity breach and no confidentiality/availability effects per CVSS? (Base 4.3, MEDIUM). Connected document...

4.3CVSS5.7AI score0.01436EPSS