Vulnerabilities

TI-2006-04560 CVE-2006-4720 · GHSA-4hgr-7r85-r63f

PHP remote file inclusion vulnerability in random2.php in mcGalleryPRO 2006 allows remote…

LOW 39

PHP remote file inclusion vulnerability in random2.php in mcGalleryPRO 2006 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03607 Published 2006-09-12 No fix listed

TI-2005-03996 CVE-2005-4251 · GHSA-fjc5-6pxf-p2h2

Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote…

LOW 35

Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) start, and (3) rand parameters to show.php, and the (4) album parameter…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0129 Published 2005-12-14 No fix listed

TI-2005-03995 CVE-2005-4250 · GHSA-frm8-c9x4-2pg5

Directory traversal vulnerability in mcGallery PRO 2.2 and earlier allows remote…

LOW 28

Directory traversal vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to read arbitrary files via the language parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0307 Published 2005-12-14 No fix listed

Vulnerabilities

Filters

PHP remote file inclusion vulnerability in random2.php in mcGalleryPRO 2006 allows remote…

Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote…

Directory traversal vulnerability in mcGallery PRO 2.2 and earlier allows remote…