Vulnerabilities

TI-2023-11883 CVE-2023-27040 · GHSA-fwvf-42p7-96jh

Simple Image Gallery v1.0 was discovered to contain a remote code execution (RCE)…

HIGH 82

Simple Image Gallery v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the username parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01982 Published 2023-03-16 No fix listed CWE-74

TI-2021-16316 CVE-2021-38819 · GHSA-fmcc-5jf8-h56w

A SQL injection vulnerability exits on the Simple Image Gallery System 1.0 application…

HIGH 73

A SQL injection vulnerability exits on the Simple Image Gallery System 1.0 application through "id" parameter on the album page.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00991 Published 2022-11-16 No fix listed CWE-89

TI-2021-16301 CVE-2021-38753 · GHSA-63q8-3w8v-3263

An unrestricted file upload on Simple Image Gallery Web App can be exploited to upload a…

MEDIUM 45

An unrestricted file upload on Simple Image Gallery Web App can be exploited to upload a web shell and executed to gain unauthorized access to the server hosting the web app.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0146 Published 2021-08-16 No fix listed CWE-434

Vulnerabilities

Filters

Simple Image Gallery v1.0 was discovered to contain a remote code execution (RCE)…

A SQL injection vulnerability exits on the Simple Image Gallery System 1.0 application…

An unrestricted file upload on Simple Image Gallery Web App can be exploited to upload a…