VYPR

Slider Gallery

by Apptha

CVEs (2)

  • CVE-2017-20249HigJun 9, 2026
    risk 0.53cvss 8.2epss

    Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the albid parameter. Attackers can send GET requests with crafted SQL payloads in the albid parameter to…

  • CVE-2017-20248HigJun 9, 2026
    risk 0.49cvss 7.5epss

    Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the imgname parameter. Attackers can send requests to asgallDownload.php with directory traversal sequences ../ to access sensitive…