Phpalbum

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Phpalbum records in CISA KEV

No Phpalbum vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phpalbum 3 records LOW

Records

3 records in Phpalbum · all components

TI-2011-04135 CVE-2011-4807 · GHSA-6qv9-jm57-f32x

Directory traversal vulnerability in main.php in phpAlbum 0.4.1.16 and earlier allows…

LOW 28

Directory traversal vulnerability in main.php in phpAlbum 0.4.1.16 and earlier allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02911 Published 2011-12-14 No fix listed CWE-22

TI-2011-03327 CVE-2011-3770 · GHSA-rj6g-x922-phvr

phpAlbum 0.4.1.14 allows remote attackers to obtain sensitive information via a direct…

LOW 25

phpAlbum 0.4.1.14 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Flowing_Dark/parameters.tp…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01242 Published 2011-09-24 No fix listed CWE-200

TI-2011-04134 CVE-2011-4806 · GHSA-prwh-29wq-q5c8

Multiple cross-site scripting (XSS) vulnerabilities in main.php in phpAlbum 0.4.1.16 and…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in main.php in phpAlbum 0.4.1.16 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) var1 and (2) keyword parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01357 Published 2011-12-14 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0