VendorsInvision Power Servicesinvision_gallery1.3.1
Vulnerabilities

Invision Power Services Invision Gallery 1.3.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2006-5206
SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in (1) index.php and (2) forum/index.php, when the rate command in the gallery automodule is used.
Published 2006-10-09 · Modified
7.51 PoCEPSS 0.043
CVE-2006-5205
Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the dir parameter in (1) index.php and (2) forum/index.php, when the viewimage command in the gallery module is used.
Published 2006-10-09 · Modified
5.01 PoCEPSS 0.110