Read the docs

Kwalbum

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Kwalbum records in CISA KEV

No Kwalbum vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Kwalbum · all components

Priority LOW 38

Unrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICS_PATH is located in the web root, allows remote authenticated users with upload capability to execute arbitrary code by uploading a fi…

CVSS 2.0HIGH 7.1 Network Low privileges Interaction — EPSS 0.04128 Published 2008-12-18 No fix listed CWE-20
Open these records in search →