Invision Gallery
Approved changes feed: RSS · Atom
cpe:2.3:a:invision_power_services:invision_gallery:1.0.1:*:*:*:*:*:*:*
part: a version: 1.0.1 update: *
| Vendor | Invision Power Services (874d7196-accf-52a5-a9bf-11780ed5a490) |
|---|---|
| Product | Invision Gallery (c48689e7-acbe-51e5-bfbc-4863140be686) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-5206 |
vulnerable | 2026-06-08 04:49:20.019189 |
Details available
SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in (1) index.php and (2) forum/index.php, when the rate command in the gallery automodule is used.
Published: 2006-10-09T19:00:00.000Z
Updated: 2024-08-07T19:41:04.392Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5205 |
vulnerable | 2026-06-08 04:49:20.014510 |
Details available
Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the dir parameter in (1) index.php and (2) forum/index.php, when the viewimage command in the gallery module is used.
Published: 2006-10-09T19:00:00.000Z
Updated: 2024-08-07T19:41:05.736Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1948 |
vulnerable | 2026-06-08 04:48:27.950968 |
Details available
Multiple SQL injection vulnerabilities in Invision Gallery before 1.3.1 allow remote attackers to execute arbitrary SQL commands via (1) the comment parameter in an editcomment action or (2) the rating parameter when voting on a photo.
Published: 2005-06-14T04:00:00.000Z
Updated: 2024-08-07T22:06:57.721Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1835 |
vulnerable | 2026-06-08 04:48:07.797517 |
Details available
Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitrary SQL via the (1) img, (2) cat, (3) sort_key, (4) order_key, (5) user, or (6) album parameters.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:07:48.179Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.