Login Request a demo
IG
Product
Invision Gallery
by Invision Power Services · last CVE Jan 23, 2008
9
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 0
Severity
All severities9Critical0High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Invision Gallery to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2008-0421
–
1%
Jan 23
SQL injection vulnerability in Invision Gallery 2.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the album parameter in a rate command
Affected: through 2.0.7
CVE-2006-6370
–
1%
Dec 7
SQL injection vulnerability in forum/modules/gallery/post.php in Invision Gallery 2.0.7 allows remote attackers to cause a denial of service and possibly have other impacts, as…
Affected: 2.0.7
CVE-2006-5205
–
11%
Oct 10
Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a
Affected: 1.0.1; 1.3; 1.3.1; 2.0.3; 2.0.6; 2.0.7
CVE-2006-5206
–
4%
Oct 10
SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in (1) index.php and (2) forum/index.php,…
Affected: through 2.0.7; 1.0.1; 1.3; 1.3.1; 2.0.3; 2.0.6
CVE-2006-2202
–
2%
May 4
SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album parameter
Affected: 2.0.6
CVE-2005-3477
–
1%
Nov 3
Multiple interpretation error in the image upload handling code in Invision Gallery 2.0.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML or script…
Affected: 2.0.3
CVE-2005-3395
–
3%
Nov 1
SQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute arbitrary SQL commands via the st parameter
Affected: 2.0.3
CVE-2005-1948
–
1%
Jun 9
Multiple SQL injection vulnerabilities in Invision Gallery before 1.3.1 allow remote attackers to execute arbitrary SQL commands via (1) the comment parameter in an editcomment…
Affected: 1.0.1; 1.3
CVE-2004-1835
–
5%
Dec 31
Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitrary SQL via the (1) img, (2) cat, (3) sort_key, (4)…
Affected: 1.0.1
Showing 9