phpAlbum 0.4.1-14_fix02
Approved changes feed: RSS · Atom
cpe:2.3:a:phpalbum:phpalbum:0.4.1-14:fix02:*:*:*:*:*:*part: a version: 0.4.1-14 update: fix02
| Vendor | Phpalbum (efccbb7e-4842-5a7c-a0ad-cb36ed5b329d) |
|---|---|
| Product | Phpalbum (f0ce7e20-5dcb-5293-8830-abad4b96deec) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-4807 |
vulnerable | 2026-06-08 04:59:33.074004 |
Details available
Directory traversal vulnerability in main.php in phpAlbum 0.4.1.16 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the var1 parameter.
Published: 2011-12-14T00:00:00.000Z
Updated: 2024-09-17T00:55:43.440Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4806 |
vulnerable | 2026-06-08 04:59:33.070830 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in main.php in phpAlbum 0.4.1.16 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) var1 and (2) keyword parameters.
Published: 2011-12-14T00:00:00.000Z
Updated: 2024-09-16T23:10:39.520Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.