Vulnerabilities

TI-2008-06011 CVE-2008-6318 · GHSA-p65r-6gpp-mr6j

PHP remote file inclusion vulnerability in _conf/_php-core/common-tpl-vars.php in…

LOW 37

PHP remote file inclusion vulnerability in _conf/_php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter, a different vector than C…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02055 Published 2009-02-27 No fix listed CWE-94

TI-2008-06010 CVE-2008-6317 · GHSA-gmpp-xvgm-fpmg

Directory traversal vulnerability in _conf/_php-core/common-tpl-vars.php in PHPmyGallery…

LOW 34

Directory traversal vulnerability in _conf/_php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01972 Published 2009-02-27 No fix listed CWE-22

TI-2008-06009 CVE-2008-6316 · GHSA-xp68-m589-2r25

Directory traversal vulnerability in _conf/core/common-tpl-vars.php in PHPmyGallery 1.0…

LOW 34

Directory traversal vulnerability in _conf/core/common-tpl-vars.php in PHPmyGallery 1.0 beta2 allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01972 Published 2009-02-27 No fix listed CWE-22

TI-2008-06008 CVE-2008-6315 · GHSA-2x7j-g4wr-p52p

PHP remote file inclusion vulnerability in _conf/core/common-tpl-vars.php in PHPmyGallery…

LOW 37

PHP remote file inclusion vulnerability in _conf/core/common-tpl-vars.php in PHPmyGallery 1.0 beta2 allows remote attackers to execute arbitrary PHP code via a URL in the confdir parameter, a different issue than CVE-200…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02055 Published 2009-02-27 No fix listed CWE-94

TI-2008-05314 CVE-2008-5598 · GHSA-fjfg-rjww-xp6w

Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote…

LOW 28

Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary directories via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02906 Published 2008-12-16 No fix listed CWE-22