Ktools Photostore vulnerabilities
4 known vulnerabilities affecting ktools/photostore.
Total CVEs
4
CISA KEV
0
Public exploits
4
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH3
Vulnerabilities
Page 1 of 1
CVE-2016-4337P2CRITICALCVSS 9.8PoC≤ 4.7.42017-04-12
CVE-2016-4337 [CRITICAL] CWE-89 CVE-2016-4337: SQL injection vulnerability in the mgr.login.php file in Ktools.net Photostore before 4.7.5 allows r
SQL injection vulnerability in the mgr.login.php file in Ktools.net Photostore before 4.7.5 allows remote attackers to execute arbitrary SQL commands via the email parameter in a recover_login action.
nvd
CVE-2008-6649P3HIGHCVSS 7.5PoCv2.5v2.9.8+10 more2009-04-07
CVE-2008-6649 [HIGH] CWE-89 CVE-2008-6649: SQL injection vulnerability in manager/image_details_editor.php in Ktools PhotoStore 2.5, 2.9.8, 3.1
SQL injection vulnerability in manager/image_details_editor.php in Ktools PhotoStore 2.5, 2.9.8, 3.1.0, and other versions through 3.5.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
nvd
CVE-2008-6647P3HIGHCVSS 7.5PoCv3.4.32009-04-07
CVE-2008-6647 [HIGH] CWE-89 CVE-2008-6647: SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to exe
SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to execute arbitrary SQL commands via the gid parameter.
nvd
CVE-2008-6648P3HIGHCVSS 7.5PoCv3.4.3v3.5.22009-04-07
CVE-2008-6648 [HIGH] CVE-2008-6648: SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attacke
SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter to about_us.php. NOTE: this might be the same issue as CVE-2008-6647.
nvd