Scry Gallery

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Scry Gallery records in CISA KEV

No Scry Gallery vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Scry Gallery 3 records LOW

Records

3 records

TI-2006-01940 CVE-2006-1995 · GHSA-x469-qm3r-q2rr

Directory traversal vulnerability in index.php in Scry Gallery 1.1 allows remote…

LOW 30

Directory traversal vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to read arbitrary files via ".." sequences in the p parameter, which is not properly sanitized due to an rtrim function call with…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0448 Published 2006-04-25 No fix listed

TI-2006-01941 CVE-2006-1996 · GHSA-frwv-rwmf-hpfj

Scry Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid p…

LOW 26

Scry Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid p parameter, which reveals the path in an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01658 Published 2006-04-25 No fix listed

TI-2006-01946 CVE-2006-2001 · GHSA-w8qm-qm5m-qp68

Cross-site scripting (XSS) vulnerability in index.php in Scry Gallery 1.1 allows remote…

LOW 25

Cross-site scripting (XSS) vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the p parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02352 Published 2006-04-25 No fix listed

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0