Vulnerabilities > Photopost > Critical

DATE CVE VULNERABILITY TITLE RISK
2008-01-12 CVE-2008-0251 Improper Input Validation vulnerability in Photopost Vbgallery
Unrestricted file upload vulnerability in PhotoPost vBGallery before 2.4.2 allows remote attackers to upload and execute arbitrary files via unknown vectors.
network
low complexity
photopost CWE-20
critical
10.0
2004-11-23 CVE-2004-0250 SQL Injection vulnerability in All Enthusiast Photopost PHP Pro
SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the product parameter in showproduct.php or (2) the cat parameter in showcat.php.
network
low complexity
photopost
critical
10.0
2004-11-23 CVE-2004-0239 SQL Injection vulnerability in All Enthusiast Photopost PHP Pro
SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unauthorized access via the photo variable.
network
low complexity
photopost
critical
10.0