MiniGal

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

MiniGal records in CISA KEV

No MiniGal vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Minigal 3 records LOW Mg2 1 record LOW

Records

3 records in Minigal · all components

TI-2007-02067 CVE-2007-2146 · GHSA-g7fw-7775-6f78

The imagecomments function in classes.php in MiniGal b13 allow remote attackers to inject…

LOW 37

The imagecomments function in classes.php in MiniGal b13 allow remote attackers to inject arbitrary PHP code into a file in the thumbs/ directory via the (1) name or (2) email parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01976 Published 2007-04-19 No fix listed

TI-2007-02066 CVE-2007-2145 · GHSA-cjxg-667g-2p2g

The imagecomments function in classes.php in MiniGal b13 allows remote attackers to…

LOW 37

The imagecomments function in classes.php in MiniGal b13 allows remote attackers to inject arbitrary PHP code into a file in the thumbs/ directory via the input parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02139 Published 2007-04-19 No fix listed

TI-2008-06621 CVE-2008-6933 · GHSA-48m4-gq2m-xcx4

Directory traversal vulnerability in index.php in MiniGal b13 (aka MG2) allows remote…

LOW 28

Directory traversal vulnerability in index.php in MiniGal b13 (aka MG2) allows remote attackers to read the source code of .php files, and possibly the content of other files, via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02672 Published 2009-08-11 No fix listed CWE-22

Open these records in search →

Critical	0
High	2
Medium	4
Low	0
No CVSS	0