GCVE - cpe:2.3:a:photopost:photopost_php_pro:3.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:photopost:photopost_php_pro:3.2:*:*:*:*:*:*:*

part: a version: 3.2 update: *

Vendor	Photopost (`6eced4c1-b290-5d3d-9863-fcd778c32227`)
Product	Photopost Php Pro (`d20802b9-7458-57fb-898d-0563d13cb7c6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-1629`	vulnerable	2026-06-08 04:48:27.058362	Details available SQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to execute arbitrary SQL commands via the verifykey parameter. Published: 2005-05-17T04:00:00.000Z Updated: 2024-09-16T17:14:39.808Z Open on db.gcve.eu Reference links http://seclists.org/lists/fulldisclosure/2005/May/0311.html http://www.securityfocus.com/bid/13620	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1871`	vulnerable	2026-06-08 04:48:07.901170	Details available Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ppuser, (2) password, (3) stype, (4) perpage, (5) sort, (6) page, (7) si, or (8) cat parameters to showmembers.php, or the (9) photo name, (10) photo description, (11) album name, or (12) album description fields. Published: 2005-05-10T04:00:00.000Z Updated: 2024-08-08T01:07:48.785Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/9994 https://exchange.xforce.ibmcloud.com/vulnerabilities/15643 http://marc.info/?l=bugtraq&m=108057790723123&w=2 http://securitytracker.com/id?1009571 http://www.gulftech.org/03282004.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1870`	vulnerable	2026-06-08 04:48:07.898102	Details available Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users' passwords via the (1) photo parameter to addfav.php, (2) photo parameter to comments.php, (3) credit parameter to comments.php, (4) cat parameter to index.php, (5) ppuser parameter to showgallery.php, (6) cat parameter to showgallery.php, (7) cat parameter to uploadphoto.php, (8) albumid parameter to useralbums.php, or (9) albumid parameter to useralbums.php. Published: 2005-05-10T04:00:00.000Z Updated: 2024-08-08T01:07:49.031Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/9994 http://marc.info/?l=bugtraq&m=108057790723123&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/15642 http://securitytracker.com/id?1009571 http://secunia.com/advisories/11241	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0250`	vulnerable	2026-06-08 04:47:49.186289	Details available SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the product parameter in showproduct.php or (2) the cat parameter in showcat.php. Published: 2004-03-18T05:00:00.000Z Updated: 2024-08-08T00:10:03.909Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/15008 http://marc.info/?l=bugtraq&m=107593114909696&w=2 http://www.securityfocus.com/bid/9557 http://www.zone-h.org/en/advisories/read/id=3864/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0239`	vulnerable	2026-06-08 04:47:49.167214	Details available SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unauthorized access via the photo variable. Published: 2004-03-18T05:00:00.000Z Updated: 2024-08-08T00:10:03.982Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/15008 http://www.securiteam.com/securitynews/5KP010UC0W.html http://www.securityfocus.com/bid/9557 http://marc.info/?l=bugtraq&m=107582512023998&w=2	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.