Vulnerabilities

TI-2011-04135 CVE-2011-4807 · GHSA-6qv9-jm57-f32x

Directory traversal vulnerability in main.php in phpAlbum 0.4.1.16 and earlier allows…

LOW 28

Directory traversal vulnerability in main.php in phpAlbum 0.4.1.16 and earlier allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02911 Published 2011-12-14 No fix listed CWE-22

TI-2011-04134 CVE-2011-4806 · GHSA-prwh-29wq-q5c8

Multiple cross-site scripting (XSS) vulnerabilities in main.php in phpAlbum 0.4.1.16 and…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in main.php in phpAlbum 0.4.1.16 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) var1 and (2) keyword parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01357 Published 2011-12-14 No fix listed CWE-79

TI-2011-03327 CVE-2011-3770 · GHSA-rj6g-x922-phvr

phpAlbum 0.4.1.14 allows remote attackers to obtain sensitive information via a direct…

LOW 25

phpAlbum 0.4.1.14 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Flowing_Dark/parameters.tp…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01242 Published 2011-09-24 No fix listed CWE-200

Vulnerabilities

Filters

Directory traversal vulnerability in main.php in phpAlbum 0.4.1.16 and earlier allows…

Multiple cross-site scripting (XSS) vulnerabilities in main.php in phpAlbum 0.4.1.16 and…

phpAlbum 0.4.1.14 allows remote attackers to obtain sensitive information via a direct…