Imgallery

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Imgallery records in CISA KEV

No Imgallery vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Imgallery 3 records LOW

Records

3 records

TI-2006-03063 CVE-2006-3163 · GHSA-4gf7-49hm-67v5

Multiple SQL injection vulnerabilities in galeria.php in IMGallery 2.4 and earlier allow…

LOW 36

Multiple SQL injection vulnerabilities in galeria.php in IMGallery 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) start or (2) sort parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01413 Published 2006-06-22 No fix listed

TI-2008-02241 CVE-2008-2337 · GHSA-5jcr-gqqm-w4j8

Multiple SQL injection vulnerabilities in IMGallery 2.5, when magic_quotes_gpc is…

LOW 35

Multiple SQL injection vulnerabilities in IMGallery 2.5, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) kategoria parameter to (a) galeria.php and the (2) id_phot…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2008-05-19 No fix listed CWE-89

TI-2007-00077 CVE-2007-0082 · GHSA-4jjw-785r-x9vr

users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with…

LOW 33

users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows remote authenticated users to upload and execute arbitrary PHP scripts.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02165 Published 2007-01-05 No fix listed

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0