Search Results (22 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2005-0776 1 Photopost 1 Photopost Php Pro 2025-04-03 N/A
adm-photo.php in PhotoPost PHP 5.0 RC3 does not properly verify administrative privileges before manipulating photos, which could allow remote attackers to manipulate other users' photos.
CVE-2004-0250 1 Photopost 1 Photopost Php Pro 2025-04-03 N/A
SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the product parameter in showproduct.php or (2) the cat parameter in showcat.php.