Vulnerabilities

TI-2009-02784 CVE-2009-2922 · GHSA-xc7p-88w7-44wr

Absolute path traversal vulnerability in pixaria.image.php in Pixaria Gallery 2.0.0…

LOW 39

Absolute path traversal vulnerability in pixaria.image.php in Pixaria Gallery 2.0.0 through 2.3.5 allows remote attackers to read arbitrary files via a base64-encoded file parameter.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02593 Published 2009-08-21 No fix listed CWE-22

TI-2007-02374 CVE-2007-2458 · GHSA-cr23-vq27-p59f

Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow…

MEDIUM 45

Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the cfg[sys][base_path] parameter to psg.smarty.lib.php and certain inc…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.1013 Published 2007-05-02 No fix listed CWE-94

TI-2007-02373 CVE-2007-2457 · GHSA-qvxr-389g-385v

PHP remote file inclusion vulnerability in resources/includes/class.Smarty.php in Pixaria…

MEDIUM 46

PHP remote file inclusion vulnerability in resources/includes/class.Smarty.php in Pixaria Gallery before 1.4.3 allows remote attackers to execute arbitrary PHP code via a URL in the cfg[sys][base_path] parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.11782 Published 2007-05-02 No fix listed

Vulnerabilities

Filters

Absolute path traversal vulnerability in pixaria.image.php in Pixaria Gallery 2.0.0…

Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow…

PHP remote file inclusion vulnerability in resources/includes/class.Smarty.php in Pixaria…