Elkagroup Image Gallery vulnerabilities
3 known vulnerabilities affecting elkagroup/image_gallery.
Total CVEs
3
CISA KEV
0
Public exploits
3
Exploited in wild
0
Severity breakdown
HIGH2MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2008-5037P3HIGHCVSS 7.5PoCv1.02008-11-12
CVE-2008-5037 [HIGH] CWE-89 CVE-2008-5037: SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to ex
SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter.
nvd
CVE-2007-3461P3HIGHCVSS 7.5PoCv1.02007-06-27
CVE-2007-3461 [HIGH] CVE-2007-3461: SQL injection vulnerability in property.php in elkagroup Image Gallery 1.0 allows remote attackers t
SQL injection vulnerability in property.php in elkagroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter.
nvd
CVE-2009-1446P3MEDIUMCVSS 6.5PoCv1.02009-04-27
CVE-2009-1446 [MEDIUM] CWE-20 CVE-2009-1446: Unrestricted file upload vulnerability in upload.php in Elkagroup Image Gallery 1.0 allows remote au
Unrestricted file upload vulnerability in upload.php in Elkagroup Image Gallery 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in gallery/pictures/. NOTE: some of these details are obtained from third party information.
nvd