Xoogallery

4 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-25524 Mar 12, 16:16 HIGH POC This Week

XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'p' parameter. [CVSS 8.2 HIGH]

PHP Information Disclosure SQLi Xoogallery Xooscripts

NVD Exploit-DB VulDB

CVSS 3.1

8.2

EPSS

0.2%

CVE-2019-25523 Mar 12, 16:16 HIGH POC This Week

XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cat_id parameter. [CVSS 8.2 HIGH]

PHP Information Disclosure SQLi Xoogallery Xooscripts

NVD Exploit-DB VulDB

CVSS 3.1

8.2

EPSS

0.1%

CVE-2019-25522 Mar 12, 16:16 HIGH POC This Week

XooGallery Latest contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through the photo_id parameter. [CVSS 8.2 HIGH]

PHP Information Disclosure SQLi Xoogallery Xooscripts

NVD Exploit-DB VulDB

CVSS 3.1

8.2

EPSS

0.1%

CVE-2019-25521 Mar 12, 16:16 HIGH POC This Week

XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the gal_id parameter. [CVSS 8.2 HIGH]

PHP SQLi Xoogallery Xooscripts

NVD Exploit-DB VulDB

CVSS 3.1

8.2

EPSS

0.1%

CVE-2019-25524

EPSS 0% CVSS 8.2

HIGH POC This Week

XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'p' parameter. [CVSS 8.2 HIGH]

PHP Information Disclosure SQLi +2

NVD Exploit-DB VulDB

CVE-2019-25523

EPSS 0% CVSS 8.2

HIGH POC This Week

XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cat_id parameter. [CVSS 8.2 HIGH]

PHP Information Disclosure SQLi +2

NVD Exploit-DB VulDB

CVE-2019-25522

EPSS 0% CVSS 8.2

HIGH POC This Week

PHP Information Disclosure SQLi +2

NVD Exploit-DB VulDB

CVE-2019-25521

EPSS 0% CVSS 8.2

HIGH POC This Week

XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the gal_id parameter. [CVSS 8.2 HIGH]

PHP SQLi Xoogallery +1

NVD Exploit-DB VulDB