Vulnerabilities

TI-2015-02637 CVE-2015-2983 · GHSA-r9pg-rq85-x734

Cross-site request forgery (CSRF) vulnerability in admin.php in PHP Kobo Photo Gallery…

LOW 31

Cross-site request forgery (CSRF) vulnerability in admin.php in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlier allows remote attackers to hijack the authentication of arbitrary use…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00649 Published 2015-08-22 No fix listed CWE-352

TI-2015-02636 CVE-2015-2982 · GHSA-xxhc-wx4f-q7f9

Cross-site scripting (XSS) vulnerability in jquery.lightbox-0.5.min.js in PHP Kobo Photo…

LOW 22

Cross-site scripting (XSS) vulnerability in jquery.lightbox-0.5.min.js in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlier allows remote authenticated users to inject arbitrary web s…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01171 Published 2015-08-22 No fix listed CWE-79

TI-2014-03167 CVE-2014-3894 · GHSA-wwm2-92w8-6wvp

Cross-site scripting (XSS) vulnerability in PHP Kobo Multifunctional MailForm Free…

LOW 22

Cross-site scripting (XSS) vulnerability in PHP Kobo Multifunctional MailForm Free 2014/1/28 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00931 Published 2014-07-20 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in admin.php in PHP Kobo Photo Gallery…

Cross-site scripting (XSS) vulnerability in jquery.lightbox-0.5.min.js in PHP Kobo Photo…

Cross-site scripting (XSS) vulnerability in PHP Kobo Multifunctional MailForm Free…