VendorsInvision Power Servicesinvision_gallery2.0.6
Vulnerabilities

Invision Power Services Invision Gallery 2.0.6

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2006-5206
SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in (1) index.php and (2) forum/index.php, when the rate command in the gallery automodule is used.
Published 2006-10-09 · Modified
7.51 PoCEPSS 0.043
CVE-2006-2202
SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album parameter.
Published 2006-05-04 · Modified
6.4EPSS 0.016
CVE-2006-5205
Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the dir parameter in (1) index.php and (2) forum/index.php, when the viewimage command in the gallery module is used.
Published 2006-10-09 · Modified
5.01 PoCEPSS 0.110