Photopost

Records21All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Photopost records in CISA KEV

No Photopost vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Photopost Php Pro 16 records MEDIUM Reviewpost Php Pro 3 records LOW Photopost Vbgallery 2 records MEDIUM

Records

3 records in Reviewpost Php Pro · all components

TI-2005-00237 CVE-2005-0272 · GHSA-fp4h-9r79-c6m8

ReviewPost PHP Pro before 2.84 allows remote attackers to upload and execute arbitrary…

LOW 38

ReviewPost PHP Pro before 2.84 allows remote attackers to upload and execute arbitrary PHP files by posting a review file with multiple extensions, which bypasses the intended restrictions.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02659 Published 2005-02-10 No fix listed

TI-2005-00236 CVE-2005-0271 · GHSA-v67f-866f-jrfg

Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote…

LOW 35

Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showcat.php or (2) product parameter to addfav.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01229 Published 2005-02-10 No fix listed

TI-2005-00235 CVE-2005-0270 · GHSA-62mv-972j-7qm3

Multiple cross-site scripting (XSS) vulnerabilities in ReviewPost PHP Pro before 2.84…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to inject arbitrary web script or HTML via the (1) si parameter to showcat.php, (2) cat or (3) page parameter t…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01752 Published 2005-02-10 No fix listed

Open these records in search →

Critical	3
High	9
Medium	9
Low	0
No CVSS	0