Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Xooscripts Component: Xoogallery Clear all filters
TI-2019-15577 CVE-2019-25524 · GHSA-r6hg-wqjc-4874

XooGallery Lastest Latest SQL Injection via results.php

Priority HIGH 77

XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'p' parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00447 Published 2026-03-12 No fix listed CWE-89
TI-2019-15576 CVE-2019-25523 · GHSA-hqxq-f57j-hxm4

XooGallery Lastest Latest SQL Injection via cat.php

Priority HIGH 77

XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cat_id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00447 Published 2026-03-12 No fix listed CWE-89
TI-2019-15575 CVE-2019-25522 · GHSA-965p-mpmm-22r4

XooGallery Lastest Latest Multiple SQL Injections via photo.php

Priority HIGH 77

XooGallery Latest contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through the photo_id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00415 Published 2026-03-12 No fix listed CWE-89
TI-2019-15574 CVE-2019-25521 · GHSA-vjhg-99hj-59fh

XooGallery Lastest Latest SQL Injection via gal.php gal_id

Priority MEDIUM 44

XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the gal_id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00333 Published 2026-03-12 No fix listed CWE-89