CVE-2005-0376

The CVE-2005-0376 entry describes a PHP remote file inclusion in SGallery 1.01 where an attacker can modify DOCUMENT_ROOT to reference a URL on a remote server and execute arbitrary PHP code in the files (config.php or sql_layer.php). Root cause: improper validation of DOCUMENT_ROOT enabling remo...

CVE-2005-0377

The CVE describes an SQL injection in SGallery 1.01 (imageview.php) that can be triggered via the idalbum or idimage parameters, allowing remote execution of arbitrary SQL commands. CVSS v2 base score 7.5 ( HIGH ) with network attack vector and low attack complexity; impacts on confidentiality, i...

CVE-2005-0375

CVE-2005-0375 affects SGallery 1.01 via imageview.php. When (1) idalbum or (2) idimage is unset, an error in sql_fetch_row reveals the installation path, exposing sensitive information. This is a partial confidentiality impact described by the NVD score (base 5.0). The connected records confirm t...