Vulnerabilities

TI-2007-01776 CVE-2007-1852 · GHSA-g739-94xf-872w

Multiple PHP remote file inclusion vulnerabilities in 2BGal 3.1.1 allow remote attackers…

LOW 33

Multiple PHP remote file inclusion vulnerabilities in 2BGal 3.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the lang_filename parameter to (1) index.php or (2) backupdb.inc.php in admin/, or other…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01368 Published 2007-04-03 No fix listed

TI-2006-05316 CVE-2006-5505 · GHSA-5xfp-w3p6-rw45

Multiple PHP file inclusion vulnerabilities in 2BGal 3.0 allow remote attackers to…

LOW 38

Multiple PHP file inclusion vulnerabilities in 2BGal 3.0 allow remote attackers to execute arbitrary PHP code via the lang parameter to (1) admin/configuration.inc.php, (2) admin/creer_album.inc.php, (3) admin/changepwd.…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02762 Published 2006-10-25 No fix listed

TI-2004-01292 CVE-2004-1415 · GHSA-hph8-fq2h-332m

SQL injection vulnerability in (1) disp_album.php and possibly (2) disp_img.php in 2Bgal…

LOW 25

SQL injection vulnerability in (1) disp_album.php and possibly (2) disp_img.php in 2Bgal 2.4 and 2.5.1 allows remote attackers to execute arbitrary SQL commands via the id_album parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01155 Published 2005-02-12 No fix listed

Vulnerabilities

Filters

Multiple PHP remote file inclusion vulnerabilities in 2BGal 3.1.1 allow remote attackers…

Multiple PHP file inclusion vulnerabilities in 2BGal 3.0 allow remote attackers to…

SQL injection vulnerability in (1) disp_album.php and possibly (2) disp_img.php in 2Bgal…