Nitropowered : Security Vulnerabilities, CVEs,
SQL injection vulnerability in index.php in NITRO Web Gallery allows remote attackers to execute arbitrary SQL commands via the PictureId parameter in an open action.
Max CVSS
7.5
EPSS Score
0.06%
Published
2010-06-02
Updated
2017-08-17
SQL injection vulnerability in albums.php in NiTrO Web Gallery 1.4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the CatId parameter in a show action.
Max CVSS
7.5
EPSS Score
0.06%
Published
2008-06-23
Updated
2017-09-29
2 vulnerabilities found