Photopost Php Pro
Approved changes feed: RSS · Atom
cpe:2.3:a:photopost:photopost_php_pro:5.0_rc3:*:*:*:*:*:*:*
part: a version: 5.0_rc3 update: *
| Vendor | Photopost (6eced4c1-b290-5d3d-9863-fcd778c32227) |
|---|---|
| Product | Photopost Php Pro (d20802b9-7458-57fb-898d-0563d13cb7c6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2005-1629 |
vulnerable | 2026-06-08 04:48:27.061794 |
Details available
SQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to execute arbitrary SQL commands via the verifykey parameter.
Published: 2005-05-17T04:00:00.000Z
Updated: 2024-09-16T17:14:39.808Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0929 |
not_vulnerable | 2026-06-08 04:48:13.964848 |
Details available
SQL injection vulnerability in PhotoPost PHP Pro 5.x may allow remote attackers to execute arbitrary SQL commands via (1) the sl parameter to showmembers.php or (2) the photo parameter to showphoto.php.
Published: 2005-03-29T05:00:00.000Z
Updated: 2024-08-07T21:28:28.696Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0778 |
vulnerable | 2026-06-08 04:48:13.653883 |
Details available
PhotoPost PHP 5.0 RC3 does not fully verify that an uploaded file is an image file, which allows remote attackers to inject arbitrary Javascript by uploading non-image files with an image extension such as .gif.
Published: 2005-03-20T05:00:00.000Z
Updated: 2024-08-07T21:28:29.034Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0777 |
vulnerable | 2026-06-08 04:48:13.653628 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP 5.0 RC3 allow remote attackers to inject arbitrary web script or HTML via (1) the check_tags function or (2) the editbio field in the user profile.
Published: 2005-03-20T05:00:00.000Z
Updated: 2024-08-07T21:28:29.081Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0776 |
vulnerable | 2026-06-08 04:48:13.653370 |
Details available
adm-photo.php in PhotoPost PHP 5.0 RC3 does not properly verify administrative privileges before manipulating photos, which could allow remote attackers to manipulate other users' photos.
Published: 2005-03-20T05:00:00.000Z
Updated: 2024-08-07T21:28:28.696Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0775 |
vulnerable | 2026-06-08 04:48:13.653074 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0774 |
vulnerable | 2026-06-08 04:48:13.652699 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.