Search vulnerabilities

Results 22

Export CSV
CVE-2005-0776

adm-photo.php in PhotoPost PHP 5.0 RC3 does not properly verify administrative privileges before manipulating photos, which could allow remote attackers to manipulate other users' photos.

CVSS 2.0 · 5.0 Medium EPSS 2.4% KEV · Not listed
Vendors
CVE-2004-0250

SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the product parameter in showproduct.php or (2) the cat parameter in showcat.php.

CVSS 2.0 · 10.0 Critical EPSS 3.2% KEV · Not listed
Vendors