Vulnerabilities

TI-2008-06059 CVE-2008-6367 · GHSA-f9gr-2j26-2882

Unrestricted file upload vulnerability in Photos/create_album.php in Social Groupie…

MEDIUM 43

Unrestricted file upload vulnerability in Photos/create_album.php in Social Groupie allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a di…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.03397 Published 2009-03-02 No fix listed CWE-20

TI-2008-06050 CVE-2008-6358 · GHSA-6j8f-x6qm-cj3r

SQL injection vulnerability in group_index.php in Social Groupie allows remote attackers…

LOW 35

SQL injection vulnerability in group_index.php in Social Groupie allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2009-03-02 No fix listed CWE-89

Vulnerabilities

Filters

Unrestricted file upload vulnerability in Photos/create_album.php in Social Groupie…

SQL injection vulnerability in group_index.php in Social Groupie allows remote attackers…