Maxdev » My Egallery : Security Vulnerabilities, CVEs, Published In 2009
SQL injection vulnerability in the My_eGallery module for MAXdev MDPro (MD-Pro) and Postnuke allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showpic action to index.php.
Max CVSS
7.5
EPSS Score
0.07%
Published
2009-02-24
Updated
2017-09-29
SQL injection vulnerability in the My_eGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgall action to modules.php. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect.
Max CVSS
7.5
EPSS Score
0.12%
Published
2009-08-24
Updated
2018-10-11
2 vulnerabilities found