Invision Power Services

Invision Gallery

9 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2008-0421

  • EPSS 0.21%
  • Published 23.01.2008 21:00:00
  • Last modified 09.04.2025 00:30:58

SQL injection vulnerability in Invision Gallery 2.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the album parameter in a rate command.

7.5

CVE-2006-6370

  • EPSS 0.32%
  • Published 07.12.2006 17:28:00
  • Last modified 09.04.2025 00:30:58

SQL injection vulnerability in forum/modules/gallery/post.php in Invision Gallery 2.0.7 allows remote attackers to cause a denial of service and possibly have other impacts, as demonstrated using a "SELECT BENCHMARK" statement in the img parameter in...

5

CVE-2006-5205

Exploit
  • EPSS 5.29%
  • Published 10.10.2006 04:06:00
  • Last modified 09.04.2025 00:30:58

Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the dir parameter in (1) index.php and (2) forum/index.php, when the viewimage command in the gallery module is...

7.5

CVE-2006-5206

Exploit
  • EPSS 0.58%
  • Published 10.10.2006 04:06:00
  • Last modified 09.04.2025 00:30:58

SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in (1) index.php and (2) forum/index.php, when the rate command in the gallery automodule is used.

6.4

CVE-2006-2202

  • EPSS 0.73%
  • Published 04.05.2006 17:06:00
  • Last modified 03.04.2025 01:03:51

SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album parameter.

4.3

CVE-2005-3477

  • EPSS 0.5%
  • Published 03.11.2005 02:02:00
  • Last modified 03.04.2025 01:03:51

Multiple interpretation error in the image upload handling code in Invision Gallery 2.0.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML or script in an image whose type does not match its extension, which is rendered ...

7.5

CVE-2005-3395

Exploit
  • EPSS 0.69%
  • Published 01.11.2005 12:47:00
  • Last modified 03.04.2025 01:03:51

SQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute arbitrary SQL commands via the st parameter.

7.5

CVE-2005-1948

Exploit
  • EPSS 0.36%
  • Published 09.06.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

Multiple SQL injection vulnerabilities in Invision Gallery before 1.3.1 allow remote attackers to execute arbitrary SQL commands via (1) the comment parameter in an editcomment action or (2) the rating parameter when voting on a photo.

7.5

CVE-2004-1835

Exploit
  • EPSS 0.56%
  • Published 31.12.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitrary SQL via the (1) img, (2) cat, (3) sort_key, (4) order_key, (5) user, or (6) album parameters.