Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
invision power services invision gallery 2.0.7 vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2006-5206
SQL injection vulnerability in Invision Gallery 2.0.7 allows remote malicious users to execute arbitrary SQL commands via the album parameter in (1) index.php and (2) forum/index.php, when the rate command in the gallery automodule is used.
Invision Power Services Invision Gallery
Invision Power Services Invision Gallery 2.0.3
Invision Power Services Invision Gallery 1.0.1
Invision Power Services Invision Gallery 1.3
Invision Power Services Invision Gallery 1.3.1
Invision Power Services Invision Gallery 2.0.6
1 EDB exploit
5
CVSSv2
CVE-2006-5205
Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote malicious users to read arbitrary files via a .. (dot dot) sequence in the dir parameter in (1) index.php and (2) forum/index.php, when the viewimage command in the gallery module is used.
Invision Power Services Invision Gallery 2.0.3
Invision Power Services Invision Gallery 2.0.7
Invision Power Services Invision Gallery 1.0.1
Invision Power Services Invision Gallery 1.3
Invision Power Services Invision Gallery 1.3.1
Invision Power Services Invision Gallery 2.0.6
1 EDB exploit
7.5
CVSSv2
CVE-2006-6370
SQL injection vulnerability in forum/modules/gallery/post.php in Invision Gallery 2.0.7 allows remote malicious users to cause a denial of service and possibly have other impacts, as demonstrated using a "SELECT BENCHMARK" statement in the img parameter in a doaddcommen...
Invision Power Services Invision Gallery 2.0.7
7.5
CVSSv2
CVE-2008-0421
SQL injection vulnerability in Invision Gallery 2.0.7 and previous versions allows remote malicious users to execute arbitrary SQL commands via the album parameter in a rate command.
Invision Power Services Invision Gallery
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-6267
XML injection
CVE-2024-37673
CVE-2024-6266
CVE-2024-30078
arbitrary
CVE-2024-36886
CVE-2024-5346
template injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started