VYPR

Advanced Web Photo Gallery

by Terong

CVEs (2)

  • CVE-2008-1875Apr 17, 2008
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.php in Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 allows remote attackers to execute arbitrary SQL commands via the photo_id parameter.

  • CVE-2008-1711Apr 9, 2008
    risk 0.03cvss —epss 0.02

    Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.