Vulnerabilities > Photopost > Critical
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2008-01-12 | CVE-2008-0251 | Improper Input Validation vulnerability in Photopost Vbgallery Unrestricted file upload vulnerability in PhotoPost vBGallery before 2.4.2 allows remote attackers to upload and execute arbitrary files via unknown vectors. | 10.0 |
2004-11-23 | CVE-2004-0250 | SQL Injection vulnerability in All Enthusiast Photopost PHP Pro SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the product parameter in showproduct.php or (2) the cat parameter in showcat.php. | 10.0 |
2004-11-23 | CVE-2004-0239 | SQL Injection vulnerability in All Enthusiast Photopost PHP Pro SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unauthorized access via the photo variable. | 10.0 |