PatchTheCVEuphotogallery vulnerabilities and fixes
Recent CVEs affecting uphotogallery, with upgrade or downgrade steps. 4 tracked.
uphotogallery has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-02-07. Highest priority: CVE-2005-1427 (score 51/100).
- CVE-2007-0815 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in images_archive.asp in Uapplication Uphotogallery 1.1 allows remote
- CVE-2006-6247 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1 allow remote attackers to execute arb
- CVE-2006-3023 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in thumbnails.asp in Uapplication Uphotogallery 1.1 and ea
- CVE-2005-1427 HIGH 7.5 MITIGATE Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to o
FAQ
How do I fix uphotogallery vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is uphotogallery being exploited right now?
None of the tracked uphotogallery CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which uphotogallery CVE should I patch first?
CVE-2005-1427 currently ranks highest (51/100): Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to o.