Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2008-6647

SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to execute arbitrary SQL commands via the gid parameter.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Ktools
Products
Photostore
CVE-2008-6648

SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter to about_us.php. NOTE: this might be the same issue as CVE-2008-6647.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Ktools
Products
Photostore
CVE-2008-6649

SQL injection vulnerability in manager/image_details_editor.php in Ktools PhotoStore 2.5, 2.9.8, 3.1.0, and other versions through 3.5.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Ktools
Products
Photostore
CVE-2016-4337

SQL injection vulnerability in the mgr.login.php file in Ktools.net Photostore before 4.7.5 allows remote attackers to execute arbitrary SQL commands via the email parameter in a recover_login action.

CVSS 3.0 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Ktools
Products
Photostore