CVE-2007-3065

CVE-2007-3065 describes a SQL injection vulnerability in viewimage.php of Particle Gallery 1.0.1 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via the editcomment parameter (a vector/version different from CVE-2006-2862). Affected software is Particle Ga...

CVE-2007-2962

CVE-2007-2962 affects Particle Gallery 1.0.1 and earlier, with a cross-site scripting vulnerability in search.php via the order parameter. The underlying issue is a reflected XSS allowing remote attackers to inject arbitrary script/HTML into victims’ browsers. Exploitation details are not provide...

CVE-2006-2862

CVE-2006-2862 describes a SQL injection in viewimage.php for Particle Gallery 1.0.0 and earlier, exploitable via the imageid parameter. The vulnerability arises from improper handling of the parameter, allowing remote attackers to execute arbitrary SQL commands. The connected records also confirm...