~/products/tcwonline/tcw_php_album

pipeline liveDigest Docs

Tcwonline Tcw Php Album vulnerabilities

2 known vulnerabilities affecting tcwonline/tcw_php_album.

Total CVEs

2

CISA KEV

0

Public exploits

2

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM1

Vulnerabilities

SortPage 1 of 1

CVE-2010-2714P3HIGHCVSS 7.5PoCv1.02010-07-13

CVE-2010-2714 [HIGH] CWE-89 CVE-2010-2714: SQL injection vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to exec SQL injection vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to execute arbitrary SQL commands via the album parameter.

CVE-2010-2715P4MEDIUMCVSS 4.3PoCv1.02010-07-13

CVE-2010-2715 [MEDIUM] CWE-79 CVE-2010-2715: Cross-site scripting (XSS) vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote atta Cross-site scripting (XSS) vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the album parameter.