Vendors / Simple Image Gallery Web App Project Simple Image Gallery Web App Project Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 1
Exploited now Simple Image Gallery Web App Project records in CISA KEV No Simple Image Gallery Web App Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
Simple Image Gallery v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the username parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01982 · Published 2023-03-16 · No fix listed CWE-74
Priority HIGH 73
A SQL injection vulnerability exits on the Simple Image Gallery System 1.0 application through "id" parameter on the album page.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00991 · Published 2022-11-16 · No fix listed CWE-89
Priority MEDIUM 45
An unrestricted file upload on Simple Image Gallery Web App can be exploited to upload a web shell and executed to gain unauthorized access to the server hosting the web app.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0146 · Published 2021-08-16 · No fix listed CWE-434
Open these records in search → All records by CVSS severity
2 1 0 0 0
THREATIST.IORead the docs