index.php in Singapore Gallery allows remote attackers to obtain sensitive information via a request with a non-directory gallery parameter, which reveals the path in an error message.
Export limit exceeded: 425948 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search vulnerabilities
CVE-2007-3229
CVSS 2.0 · 6.8 Medium
EPSS 1.2%
KEV · Not listed
Vendors
Products
CVE-2004-1407
Multiple directory traversal vulnerabilities in singapore Image Gallery Web Application 0.9.10 allow remote attackers to (1) read arbitrary files via the showThumb method for thumb.php, or (2) delete arbitrary files via admin.class.php.
CVSS 2.0 · 5.0 Medium
EPSS 1.6%
KEV · Not listed
Vendors
Products
CVE-2004-1408
The addImage method for admin.class.php in Image Gallery Web Application 0.9.10 does not properly check filenames, which allows remote attackers to upload and execute arbitrary files.
CVSS 2.0 · 7.5 High
EPSS 1.5%
KEV · Not listed
Vendors
Products
CVE-2004-1409
Multiple cross-site scripting vulnerabilities in Image Gallery Web Application 0.9.10 allow remote attackers to inject arbitrary web script or HTML.
CVSS 2.0 · 5.0 Medium
EPSS 1.0%
KEV · Not listed
Vendors
Products
Page 1 of 1.