CVE-2010-2035

CVE-2010-2035 is a directory traversal vulnerability in the Joomla! Percha Gallery (com_perchagallery) component 1.6 Beta that allows remote attackers to read arbitrary files via a ".." in the controller parameter to index.php. The affected module is the Percha Gallery for Joomla!, version 1.6 Be...

CVE-2010-0694

CVE-2010-0694 concerns a SQL injection in the Joomla! PerchaGallery component (com_perchagallery) prior to version 1.5b. The vulnerability is triggered via the id parameter in an editunidad action to index.php, allowing remote attackers to execute arbitrary SQL commands. This can lead to data dis...