Je Photo Gallery
Approved changes feed: RSS · Atom
cpe:2.3:a:joomlaextensions:je_photo_gallery:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Joomlaextensions (6a8d04e6-f90b-5127-b0ea-74080f8ccfa3) |
|---|---|
| Product | Je Photo Gallery (4b247f3b-d6f4-54d8-b2d1-faa48309acdb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-25433 |
vulnerable | 2026-06-08 05:11:29.899107 |
Joomla JE Photo Gallery 1.1 SQL Injection via categoryid
HIGH (8.2)
Joomla Component JE Photo Gallery 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting malicious SQL code through the categoryid parameter. Attackers can send GET requests to index.php with crafted categoryid values in the com_jephotogallery component to execute arbitrary SQL queries and retrieve sensitive data like usernames and password hashes.
Published: 2026-06-01T21:00:23.105Z
Updated: 2026-06-02T13:13:56.937Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.