Vulnerabilities

TI-2012-04479 CVE-2012-5304 · GHSA-qv7q-gq5r-9gcx

Static code injection vulnerability in administration/install.php in YVS Image Gallery…

LOW 36

Static code injection vulnerability in administration/install.php in YVS Image Gallery allows remote attackers to inject arbitrary PHP code into functions/db_connect.php via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01357 Published 2012-10-06 No fix listed CWE-94

TI-2012-01356 CVE-2012-1564 · GHSA-chcm-cfp6-rx55

Cross-site scripting (XSS) vulnerability in administration/create_album.php in YVS Image…

LOW 22

Cross-site scripting (XSS) vulnerability in administration/create_album.php in YVS Image Gallery allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01206 Published 2012-10-06 No fix listed CWE-79

Vulnerabilities

Filters

Static code injection vulnerability in administration/install.php in YVS Image Gallery…

Cross-site scripting (XSS) vulnerability in administration/create_album.php in YVS Image…