Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Encaps Clear all filters
TI-2008-01911 CVE-2008-1988 · GHSA-q876-9whr-9j9w

Unrestricted file upload vulnerability in the file_upload function in core/misc.class.php…

Priority MEDIUM 44

Unrestricted file upload vulnerability in the file_upload function in core/misc.class.php in EncapsGallery 2.0.2 allows remote authenticated administrators to upload and execute arbitrary PHP files by uploading a file wi…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02585 Published 2008-04-27 No fix listed CWE-20
TI-2008-01246 CVE-2008-1296 · GHSA-ph95-5jr4-4x7p

Multiple cross-site scripting (XSS) vulnerabilities in EncapsGallery 1.11.2 allow remote…

Priority LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in EncapsGallery 1.11.2 allow remote attackers to inject arbitrary web script or HTML via the file parameter to (1) watermark.php and (2) catalog_watermark.php in core/…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01472 Published 2008-03-12 No fix listed CWE-79