Phpwebgallery
Approved changes feed: RSS · Atom
cpe:2.3:a:phpwebgallery:phpwebgallery:1.2.1:*:*:*:*:*:*:*part: a version: 1.2.1 update: *
| Vendor | Phpwebgallery (00328b62-6a61-54cf-8c7b-725e37060dcf) |
|---|---|
| Product | Phpwebgallery (b0822b19-b0da-5d6e-8a1a-ce6de21eb00d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-4645 |
vulnerable | 2026-06-08 04:50:47.488438 |
Details available
plugins/event_tracer/event_list.php in PhpWebGallery 1.7.2 and earlier allows remote authenticated administrators to execute arbitrary PHP code via PHP sequences in the sort parameter, which is processed by create_function.
Published: 2008-10-21T22:00:00.000Z
Updated: 2024-08-07T10:24:20.848Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4228 |
vulnerable | 2026-06-08 04:48:43.289688 |
Details available
Multiple SQL injection vulnerabilities in PhpWebGallery 1.5.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) since, (2) sort_by, and (3) items_number parameters to comments.php, (4) the search parameter to category.php, and (5) image_id parameter to picture.php. NOTE: it was later reported that the comments.php/sort_by vector also affects 1.7.2 and earlier.
Published: 2005-12-14T11:00:00.000Z
Updated: 2024-08-07T23:38:51.450Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.