Vulnerabilities

TI-2008-02241 CVE-2008-2337 · GHSA-5jcr-gqqm-w4j8

Multiple SQL injection vulnerabilities in IMGallery 2.5, when magic_quotes_gpc is…

LOW 35

Multiple SQL injection vulnerabilities in IMGallery 2.5, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) kategoria parameter to (a) galeria.php and the (2) id_phot…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2008-05-19 No fix listed CWE-89

TI-2007-00077 CVE-2007-0082 · GHSA-4jjw-785r-x9vr

users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with…

LOW 33

users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows remote authenticated users to upload and execute arbitrary PHP scripts.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02165 Published 2007-01-05 No fix listed

TI-2006-03063 CVE-2006-3163 · GHSA-4gf7-49hm-67v5

Multiple SQL injection vulnerabilities in galeria.php in IMGallery 2.4 and earlier allow…

LOW 36

Multiple SQL injection vulnerabilities in galeria.php in IMGallery 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) start or (2) sort parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01413 Published 2006-06-22 No fix listed

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in IMGallery 2.5, when magic_quotes_gpc is…

users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with…

Multiple SQL injection vulnerabilities in galeria.php in IMGallery 2.4 and earlier allow…