GCVE - cpe:2.3:a:clicktech:clickgallery:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:clicktech:clickgallery:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Clicktech (`889f1fe1-2266-5f03-918e-7fb16e0260d4`)
Product	Clickgallery (`16bc1cad-42cf-5ad0-94f8-fe0211504be5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-3412`	vulnerable	2026-06-08 04:49:53.986678	Details available Cross-site scripting (XSS) vulnerability in edit_image.asp in ClickGallery Server 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter. Published: 2007-06-26T23:00:00.000Z Updated: 2024-08-07T14:14:12.991Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/35024 http://osvdb.org/36371 http://secunia.com/advisories/25805 http://pridels-team.blogspot.com/2007/06/clickgallery-server-vuln.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3411`	vulnerable	2026-06-08 04:49:53.985736	Details available SQL injection vulnerability in edit_image.asp in ClickGallery Server 5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the image_id parameter. Published: 2007-06-26T23:00:00.000Z Updated: 2024-08-07T14:14:12.946Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/35023 http://secunia.com/advisories/25805 http://osvdb.org/36370 http://pridels-team.blogspot.com/2007/06/clickgallery-server-vuln.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6188`	vulnerable	2026-06-08 04:49:22.250386	Details available Cross-site scripting (XSS) vulnerability in view_search.asp in ClickTech Click Gallery allows remote attackers to inject arbitrary web script or HTML via the txtKeyWord parameter. NOTE: some of these details are obtained from third party information. Published: 2006-12-01T00:00:00.000Z Updated: 2024-08-07T20:19:34.917Z Open on db.gcve.eu Reference links http://www.aria-security.com/forum/showthread.php?t=49 https://exchange.xforce.ibmcloud.com/vulnerabilities/30536 http://secunia.com/advisories/23136 http://securityreason.com/securityalert/1937 http://www.securityfocus.com/archive/1/452733/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6187`	vulnerable	2026-06-08 04:49:22.249434	Details available Multiple SQL injection vulnerabilities in ClickTech Click Gallery allow remote attackers to execute arbitrary SQL commands via the (1) currentpage or (2) gallery_id parameter to (a) view_gallery.asp, the (3) image_id parameter to (b) download_image.asp, the currentpage or (5) orderby parameter to (c) gallery.asp, or the currentpage parameter to (d) view_recent.asp. Published: 2006-12-01T00:00:00.000Z Updated: 2024-08-07T20:19:35.051Z Open on db.gcve.eu Reference links http://www.aria-security.com/forum/showthread.php?t=49 http://secunia.com/advisories/23136 http://securityreason.com/securityalert/1937 http://www.securityfocus.com/archive/1/452733/100/0/threaded http://www.securityfocus.com/bid/21311	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3026`	vulnerable	2026-06-08 04:49:08.112656	Details available Multiple cross-site scripting (XSS) vulnerabilities in ClickGallery 5.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) gallery_id parameter in gallery.asp and (2) parentcurrentpage parameter in view_gallery.asp. Published: 2006-06-15T10:00:00.000Z Updated: 2024-08-07T18:16:04.556Z Open on db.gcve.eu Reference links http://pridels0.blogspot.com/2006/06/clickgallery-vuln.html https://exchange.xforce.ibmcloud.com/vulnerabilities/27037 http://www.vupen.com/english/advisories/2006/2315 http://secunia.com/advisories/20614	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.