| Max CVSS | 8.5 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-4262 | 8.5 |
Unrestricted file upload vulnerability in EZPhotoSales 1.9.3 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP code under OnlineViewing/galleries/.
|
15-10-2018 - 21:34 | 08-08-2007 - 23:17 | |
| CVE-2007-4259 | 5.0 |
EZPhotoSales 1.9.3 and earlier allows remote attackers to download arbitrary image files via (1) a direct request for a URL under OnlineViewing/galleries/ or (2) navigation of the gallery user interface with JavaScript disabled.
|
15-10-2018 - 21:34 | 08-08-2007 - 23:17 | |
| CVE-2007-4261 | 7.5 |
EZPhotoSales 1.9.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (1) a file containing cleartext passwords via a direct request for OnlineViewing/data/galleries
|
15-10-2018 - 21:34 | 08-08-2007 - 23:17 |