GCVE - cpe:2.3:a:imgpals:img_pals_photo

Approved changes feed: RSS · Atom

cpe:2.3:a:imgpals:img_pals_photo_host:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Imgpals (`947a9947-7a51-55fe-9bd1-3e675d938cda`)
Product	Img Pals Photo Host (`0577a2ed-3754-55cb-8ed2-23f1a6e3be36`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-4926`	vulnerable	2026-06-08 05:02:53.273939	Details available approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the activation of administrators via the u parameter in an (1) app0 (disable) or (2) app1 (enable) action. Published: 2012-09-15T17:00:00.000Z Updated: 2024-09-16T23:05:52.133Z Open on db.gcve.eu Reference links http://www.exploit-db.com/exploits/18544 http://archives.neohapsis.com/archives/bugtraq/2012-02/0180.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4925`	vulnerable	2026-06-08 05:02:53.273562	Details available Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow remote attackers to execute arbitrary SQL commands via the u parameter in a (1) app0 or (2) app1 action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2012-09-15T17:00:00.000Z Updated: 2024-08-06T20:50:18.150Z Open on db.gcve.eu Reference links http://secunia.com/advisories/48182 http://www.securityfocus.com/bid/52195 http://www.exploit-db.com/exploits/18544 http://archives.neohapsis.com/archives/bugtraq/2012-02/0180.html https://exchange.xforce.ibmcloud.com/vulnerabilities/73526	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.