Vulnerabilities

TI-2010-04764 CVE-2010-5041 · GHSA-jqc7-jcm9-pmcf

SQL injection vulnerability in index.php in the NP_Gallery plugin 0.94 for Nucleus allows…

LOW 35

SQL injection vulnerability in index.php in the NP_Gallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary SQL commands via the id parameter in a plugin action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2011-11-02 No fix listed CWE-89

TI-2010-04763 CVE-2010-5040 · GHSA-mc7r-7rqg-f4vp

PHP remote file inclusion vulnerability in nucleus/plugins/NP_gallery.php in the…

LOW 34

PHP remote file inclusion vulnerability in nucleus/plugins/NP_gallery.php in the NP_Gallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary PHP code via a URL in the DIR_NUCLEUS parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02005 Published 2011-11-02 No fix listed CWE-94

Vulnerabilities

Filters

SQL injection vulnerability in index.php in the NP_Gallery plugin 0.94 for Nucleus allows…

PHP remote file inclusion vulnerability in nucleus/plugins/NP_gallery.php in the…