Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

blue-collar productions i-gallery vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2006-3021
Multiple cross-site scripting (XSS) vulnerabilities in BlueCollar i-Gallery 4.1 PLUS and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) n and (2) d parameters in (a) login.asp and the d parameter in (b) igallery.asp.
Blue-collar Productions I-gallery 3.4Blue-collar Productions I-galleryBlue-collar Productions I-gallery 3.3
NA
CVE-2006-6088
Multiple cross-site scripting (XSS) vulnerabilities in BlueCollar i-Gallery 3.4 allow remote malicious users to inject arbitrary web script or HTML via the (1) n or (2) d parameter in igallery.asp, or (3) an unspecified parameter related to search, possibly the Search Gallery fie...
Blue-collar Productions I-gallery 3.4
NA
CVE-2007-5776
Directory traversal vulnerability in igallery.asp in Blue-Collar Productions i-Gallery 3.4 allows remote malicious users to read arbitrary files via encoded backslash sequences in the d parameter, as demonstrated by a "%5c../../%5c" sequence.
Blue-collar Productions I-gallery 3.4
NA
CVE-2007-5777
Blue-Collar Productions i-Gallery 3.4 stores sensitive information under the web root with insufficient access control, which allows remote malicious users to download a file containing a base64-encoded password via a direct request for igallery.mdb.
Blue-collar Productions I-gallery 3.4
NA
CVE-2005-2034
Cross-site scripting (XSS) vulnerability in folderview.asp for BlueCollar iGallery 3.3 allows remote malicious users to inject arbitrary web script or HTML via the folder parameter.
Blue-collar Productions I-gallery 3.3
NA
CVE-2005-2033
Directory traversal vulnerability in folderview.asp for Blue-Collar Productions i-Gallery 3.3 allows remote malicious users to read arbitrary files and directories via the folder parameter.
Blue-collar Productions I-gallery 3.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
injectCVE-2024-34001CVE-2024-37018LFICVE-2024-1275CVE-2024-1086CSRFCVE-2024-31030CVE-2024-24919
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook