Invision Power Services

Invision Gallery

9 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2008-0421

  • EPSS 0.21%
  • Veröffentlicht 23.01.2008 21:00:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

SQL injection vulnerability in Invision Gallery 2.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the album parameter in a rate command.

7.5

CVE-2006-6370

  • EPSS 0.32%
  • Veröffentlicht 07.12.2006 17:28:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

SQL injection vulnerability in forum/modules/gallery/post.php in Invision Gallery 2.0.7 allows remote attackers to cause a denial of service and possibly have other impacts, as demonstrated using a "SELECT BENCHMARK" statement in the img parameter in...

5

CVE-2006-5205

Exploit
  • EPSS 5.29%
  • Veröffentlicht 10.10.2006 04:06:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the dir parameter in (1) index.php and (2) forum/index.php, when the viewimage command in the gallery module is...

7.5

CVE-2006-5206

Exploit
  • EPSS 0.58%
  • Veröffentlicht 10.10.2006 04:06:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in (1) index.php and (2) forum/index.php, when the rate command in the gallery automodule is used.

6.4

CVE-2006-2202

  • EPSS 0.73%
  • Veröffentlicht 04.05.2006 17:06:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album parameter.

4.3

CVE-2005-3477

  • EPSS 0.5%
  • Veröffentlicht 03.11.2005 02:02:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Multiple interpretation error in the image upload handling code in Invision Gallery 2.0.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML or script in an image whose type does not match its extension, which is rendered ...

7.5

CVE-2005-3395

Exploit
  • EPSS 0.69%
  • Veröffentlicht 01.11.2005 12:47:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

SQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute arbitrary SQL commands via the st parameter.

7.5

CVE-2005-1948

Exploit
  • EPSS 0.36%
  • Veröffentlicht 09.06.2005 04:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Multiple SQL injection vulnerabilities in Invision Gallery before 1.3.1 allow remote attackers to execute arbitrary SQL commands via (1) the comment parameter in an editcomment action or (2) the rating parameter when voting on a photo.

7.5

CVE-2004-1835

Exploit
  • EPSS 0.56%
  • Veröffentlicht 31.12.2004 05:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitrary SQL via the (1) img, (2) cat, (3) sort_key, (4) order_key, (5) user, or (6) album parameters.