RSS   Vulnerabilities for 'Pixaria gallery'   RSS

2009-08-21
 
CVE-2009-2922

 

 
Absolute path traversal vulnerability in pixaria.image.php in Pixaria Gallery 2.0.0 through 2.3.5 allows remote attackers to read arbitrary files via a base64-encoded file parameter.

 
2007-05-02
 
CVE-2007-2458

CWE-94
 

 
Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the cfg[sys][base_path] parameter to psg.smarty.lib.php and certain include and library scripts, a different vector than CVE-2007-2457.

 
 
CVE-2007-2457

CWE-Other
 

 
PHP remote file inclusion vulnerability in resources/includes/class.Smarty.php in Pixaria Gallery before 1.4.3 allows remote attackers to execute arbitrary PHP code via a URL in the cfg[sys][base_path] parameter.

 


Copyright 2024, cxsecurity.com

 

Back to Top