Joomlaboat » Com Youtubegallery : Security Vulnerabilities, CVEs,
Multiple SQL injection vulnerabilities in models\gallery.php in Youtube Gallery (com_youtubegallery) component 4.x through 4.1.7, and possibly 3.x, for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) listid or (2) themeid parameter to index.php.
Max CVSS
7.5
EPSS Score
0.08%
Published
2014-07-21
Updated
2015-10-06
Cross-site scripting (XSS) vulnerability in includes/flvthumbnail.php in the Youtube Gallery (com_youtubegallery) component 3.4.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the videofile parameter.
Max CVSS
4.3
EPSS Score
0.21%
Published
2014-04-25
Updated
2014-04-25
2 vulnerabilities found