PatchTheCVEphotokorn gallery vulnerabilities and fixes
Recent CVEs affecting photokorn gallery, with upgrade or downgrade steps. 4 tracked.
Also searched as: photokorngallery.
photokorn gallery has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2010-08-25. Highest priority: CVE-2006-4670 (score 55/100).
- CVE-2009-4981 MEDIUM 6.8 UPGRADE Multiple cross-site request forgery (CSRF) vulnerabilities in Photokorn Gallery 1.81 allow remote attackers to
- CVE-2009-4980 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in Photokorn Gallery 1.81 and earlier allow remote attacke
- CVE-2009-4979 HIGH 7.5 UPGRADE Multiple SQL injection vulnerabilities in search.php in Photokorn Gallery 1.81 and earlier allow remote attack
- CVE-2006-4670 HIGH 7.5 UPGRADE Multiple PHP remote file inclusion vulnerabilities in PhotoKorn Gallery 1.52 and earlier allow remote attacker
FAQ
How do I fix photokorn gallery vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is photokorn gallery being exploited right now?
None of the tracked photokorn gallery CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which photokorn gallery CVE should I patch first?
CVE-2006-4670 currently ranks highest (55/100): Multiple PHP remote file inclusion vulnerabilities in PhotoKorn Gallery 1.52 and earlier allow remote attacker.