CVE-2007-3411
- EPSS 1.06%
- Veröffentlicht 26.06.2007 23:30:00
- Zuletzt bearbeitet 16.06.2026 22:41:58
SQL injection vulnerability in edit_image.asp in ClickGallery Server 5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the image_id parameter.
CVE-2007-3412
- EPSS 1.03%
- Veröffentlicht 26.06.2007 23:30:00
- Zuletzt bearbeitet 16.06.2026 22:41:58
Cross-site scripting (XSS) vulnerability in edit_image.asp in ClickGallery Server 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter.
CVE-2006-6187
- EPSS 1.39%
- Veröffentlicht 01.12.2006 00:28:00
- Zuletzt bearbeitet 16.06.2026 22:32:38
Multiple SQL injection vulnerabilities in ClickTech Click Gallery allow remote attackers to execute arbitrary SQL commands via the (1) currentpage or (2) gallery_id parameter to (a) view_gallery.asp, the (3) image_id parameter to (b) download_image.a...
CVE-2006-6188
- EPSS 1.31%
- Veröffentlicht 01.12.2006 00:28:00
- Zuletzt bearbeitet 16.06.2026 22:32:38
Cross-site scripting (XSS) vulnerability in view_search.asp in ClickTech Click Gallery allows remote attackers to inject arbitrary web script or HTML via the txtKeyWord parameter. NOTE: some of these details are obtained from third party information...
CVE-2006-3026
- EPSS 1.16%
- Veröffentlicht 15.06.2006 10:02:00
- Zuletzt bearbeitet 16.06.2026 22:26:15
Multiple cross-site scripting (XSS) vulnerabilities in ClickGallery 5.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) gallery_id parameter in gallery.asp and (2) parentcurrentpage parameter in view_gallery.asp.