Approved changes feed: RSS · Atom

cpe:2.3:a:sergey_kiselev:sgallery:1.01:*:*:*:*:*:*:*

part: a version: 1.01 update: *

VendorSergey Kiselev (6fdd5669-e268-520b-bafc-89a9b0a5d574)
ProductSgallery (a0b7be8b-df27-521a-b293-96b52d113ab8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-0377 vulnerable 2026-06-08 04:48:12.498770 Details available
SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to execute arbitrary SQL commands via the (1) idalbum or (2) idimage parameters.
Published: 2005-02-13T05:00:00.000Z
Updated: 2024-08-07T21:13:53.475Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0376 vulnerable 2026-06-08 04:48:12.498446 Details available
PHP remote file inclusion vulnerability in SGallery 1.01 allows local and possibly remote attackers to execute arbitrary PHP code by modifying the DOCUMENT_ROOT parameter to reference a URL on a remote web server that contains (1) config.php or (2) sql_layer.php.
Published: 2005-02-13T05:00:00.000Z
Updated: 2024-08-07T21:13:53.793Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0375 vulnerable 2026-06-08 04:48:12.498064 Details available
imageview.php in SGallery 1.01 allows remote attackers to obtain sensitive information via an HTTP request with (1) idalbum and (2) idimage unset, which reveals the installation path in an error message for the sql_fetch_row function.
Published: 2005-02-13T05:00:00.000Z
Updated: 2024-08-07T21:13:53.526Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.