Approved changes feed: RSS · Atom
cpe:2.3:a:imgallery:imgallery:2.5:*:*:*:*:*:*:*part: a version: 2.5 update: *
| Vendor | Imgallery (e67bf7c6-b62d-575d-b091-5224e370095e) |
|---|---|
| Product | Imgallery (d509849b-0079-5559-87b8-63d561f3d8ea) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-2337 |
vulnerable | 2026-06-08 04:50:23.538605 |
Details available
Multiple SQL injection vulnerabilities in IMGallery 2.5, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) kategoria parameter to (a) galeria.php and the (2) id_phot parameter to (b) popup/koment.php and (c) popup/opis.php in, different vectors than CVE-2006-3163.
Published: 2008-05-19T10:00:00.000Z
Updated: 2024-08-07T08:58:02.206Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0082 |
vulnerable | 2026-06-08 04:49:31.413723 |
Details available
users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows remote authenticated users to upload and execute arbitrary PHP scripts.
Published: 2007-01-05T11:00:00.000Z
Updated: 2024-08-07T12:03:37.107Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.