Atomic Photo Album

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Atomic Photo Album records in CISA KEV

No Atomic Photo Album vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Atomic Photo Album 3 records LOW

Records

3 records

TI-2008-04497 CVE-2008-4714 · GHSA-2qh3-cw4r-2f2r

Atomic Photo Album 1.1.0 pre4 does not properly handle the apa_cookie_login and…

LOW 38

Atomic Photo Album 1.1.0 pre4 does not properly handle the apa_cookie_login and apa_cookie_password cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified coo…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02561 Published 2008-10-23 No fix listed CWE-287

TI-2008-04134 CVE-2008-4335 · GHSA-j82h-q99p-6xcc

SQL injection vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows…

LOW 35

SQL injection vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote attackers to execute arbitrary SQL commands via the apa_album_ID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01051 Published 2008-09-30 No fix listed CWE-89

TI-2005-02284 CVE-2005-2413 · GHSA-q7xg-3v8j-52hp

PHP remote file inclusion vulnerability in apa_phpinclude.inc.php in Atomic Photo Album…

LOW 26

PHP remote file inclusion vulnerability in apa_phpinclude.inc.php in Atomic Photo Album (APA) allows remote attackers to execute arbitrary PHP code via the apa_module_basedir parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01599 Published 2005-08-03 No fix listed

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0