Vulnerabilities

TI-2008-00396 CVE-2008-0421 · GHSA-wrcf-h25j-7v55

SQL injection vulnerability in Invision Gallery 2.0.7 and earlier allows remote attackers…

LOW 35

SQL injection vulnerability in Invision Gallery 2.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the album parameter in a rate command.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00923 Published 2008-01-23 No fix listed CWE-89

TI-2006-06118 CVE-2006-6370 · GHSA-23hr-frj7-4j88

SQL injection vulnerability in forum/modules/gallery/post.php in Invision Gallery 2.0.7…

LOW 35

SQL injection vulnerability in forum/modules/gallery/post.php in Invision Gallery 2.0.7 allows remote attackers to cause a denial of service and possibly have other impacts, as demonstrated using a "SELECT BENCHMARK" sta…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01049 Published 2006-12-07 No fix listed

TI-2006-05022 CVE-2006-5206 · GHSA-9gx9-r65j-6q9x

SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute…

MEDIUM 40

SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in (1) index.php and (2) forum/index.php, when the rate command in the gallery autom…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04413 Published 2006-10-09 No fix listed

TI-2006-05021 CVE-2006-5205 · GHSA-rfx4-v9xq-8cgh

Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to…

LOW 36

Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.11153 Published 2006-10-09 No fix listed

TI-2006-02145 CVE-2006-2202 · GHSA-hjpx-35fm-2cpp

SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers…

LOW 32

SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album parameter.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01572 Published 2006-05-04 No fix listed

TI-2005-03300 CVE-2005-3477 · GHSA-89j5-hc8f-rvw2

Multiple interpretation error in the image upload handling code in Invision Gallery 2.0.3…

LOW 22

Multiple interpretation error in the image upload handling code in Invision Gallery 2.0.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML or script in an image whose type does not match its…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0116 Published 2005-11-03 No fix listed

TI-2005-03219 CVE-2005-3395 · GHSA-p555-p2q2-7ccm

SQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute…

LOW 38

SQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute arbitrary SQL commands via the st parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02544 Published 2005-11-01 No fix listed

TI-2005-01843 CVE-2005-1948 · GHSA-7qxc-g673-56cv

Multiple SQL injection vulnerabilities in Invision Gallery before 1.3.1 allow remote…

LOW 35

Multiple SQL injection vulnerabilities in Invision Gallery before 1.3.1 allow remote attackers to execute arbitrary SQL commands via (1) the comment parameter in an editcomment action or (2) the rating parameter when vot…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01167 Published 2005-06-14 No fix listed

TI-2004-01710 CVE-2004-1835 · GHSA-64r9-wcqr-wq62

Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow…

MEDIUM 41

Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitrary SQL via the (1) img, (2) cat, (3) sort_key, (4) order_key, (5) user, or (6) album parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0493 Published 2005-05-10 No fix listed

Vulnerabilities

Filters