Vulnerabilities

TI-2005-00339 CVE-2005-0377 · GHSA-p3px-77xm-92cq

SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to…

LOW 36

SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to execute arbitrary SQL commands via the (1) idalbum or (2) idimage parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01514 Published 2005-02-13 No fix listed

TI-2005-00338 CVE-2005-0376 · GHSA-hg3h-m7hf-v654

PHP remote file inclusion vulnerability in SGallery 1.01 allows local and possibly remote…

LOW 37

PHP remote file inclusion vulnerability in SGallery 1.01 allows local and possibly remote attackers to execute arbitrary PHP code by modifying the DOCUMENT_ROOT parameter to reference a URL on a remote web server that co…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02046 Published 2005-02-13 No fix listed

TI-2005-00337 CVE-2005-0375 · GHSA-cq38-x9xq-qw4m

imageview.php in SGallery 1.01 allows remote attackers to obtain sensitive information…

LOW 26

imageview.php in SGallery 1.01 allows remote attackers to obtain sensitive information via an HTTP request with (1) idalbum and (2) idimage unset, which reveals the installation path in an error message for the sql_fetch…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0155 Published 2005-02-13 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to…

PHP remote file inclusion vulnerability in SGallery 1.01 allows local and possibly remote…

imageview.php in SGallery 1.01 allows remote attackers to obtain sensitive information…