VYPR

Advanced Web Photo Gallery

by Terong

CVEs (2)

  • CVE-2008-1875Apr 17, 2008
    risk 0.03cvss epss 0.01

    SQL injection vulnerability in index.php in Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 allows remote attackers to execute arbitrary SQL commands via the photo_id parameter.

  • CVE-2008-1711Apr 9, 2008
    risk 0.03cvss epss 0.05

    Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.