Image Gallery

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:elkagroup:image_gallery:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorElkagroup (9a482099-40c4-5d0e-9ce2-a086d826e96e)
ProductImage Gallery (2791d9b3-ac19-5629-9866-40398e726eba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-1446 vulnerable 2026-06-08 04:51:23.082017 Details available
Unrestricted file upload vulnerability in upload.php in Elkagroup Image Gallery 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in gallery/pictures/. NOTE: some of these details are obtained from third party information.
Published: 2009-04-27T19:00:00.000Z
Updated: 2024-08-07T05:13:25.630Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5037 vulnerable 2026-06-08 04:50:49.199794 Details available
SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Published: 2008-11-12T20:18:00.000Z
Updated: 2024-09-17T01:15:40.348Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3461 vulnerable 2026-06-08 04:49:54.049463 Details available
SQL injection vulnerability in property.php in elkagroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter.
Published: 2007-06-27T18:00:00.000Z
Updated: 2024-08-07T14:21:35.587Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.