Skip to main content

Simple Image Gallery Web App

2 CVEs product

Monthly

CVE-2023-27040 Mar 16, 16:15 CRITICAL POC Act Now

Simple Image Gallery v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the username parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Simple Image Gallery Web App Simple Image Gallery Web App Project
NVD Exploit-DB
CVSS 3.1
9.8
EPSS
2.0%
CVE-2021-38753 Aug 16, 14:15 CRITICAL POC Act Now

An unrestricted file upload on Simple Image Gallery Web App can be exploited to upload a web shell and executed to gain unauthorized access to the server hosting the web app. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass File Upload Simple Image Gallery Web App Simple Image Gallery Web App Project
NVD GitHub
CVSS 3.1
9.8
EPSS
1.5%
EPSS 2% CVSS 9.8
CRITICAL POC Act Now

Simple Image Gallery v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the username parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Simple Image Gallery Web App Simple Image Gallery Web App Project
NVD Exploit-DB
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

An unrestricted file upload on Simple Image Gallery Web App can be exploited to upload a web shell and executed to gain unauthorized access to the server hosting the web app. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass File Upload Simple Image Gallery Web App +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy