RSS   Vulnerabilities for 'Mcgallery pro'   RSS

2006-09-12
 
CVE-2006-4720

CWE-Other
 

 
PHP remote file inclusion vulnerability in random2.php in mcGalleryPRO 2006 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter.

 
2005-12-14
 
CVE-2005-4251

 

 
Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) start, and (3) rand parameters to show.php, and the (4) album parameter to index.php.

 
 
CVE-2005-4250

 

 
Directory traversal vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to read arbitrary files via the language parameter.

 

 >>> Vendor: Mcgallery 2 Products
Mcgallery
Mcgallery pro


Copyright 2024, cxsecurity.com

 

Back to Top