CVSS: 6.8EPSS: 4%CPEs: 1EXPL: 1CVE-2007-2189 – Mx Module Smartor Album FAP 2.0 RC 1 - Remote File Inclusion
https://notcve.org/view.php?id=CVE-2007-2189
PHP remote file inclusion vulnerability in admin/admin_album_otf.php in the MX Smartor Full Album Pack (FAP) 2.0 RC1 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Vulnerabilidad de inclusión remota de archivo en PHP en admin/admin_album_otf.php en el módulo MX Smartor Full Album Pack (FAP) 2.0 RC1 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro phpbb_root_path. • https://www.exploit-db.com/exploits/3766 http://www.securityfocus.com/bid/23561 https://exchange.xforce.ibmcloud.com/vulnerabilities/33760 •
CVSS: 4.3EPSS: 0%CPEs: 19EXPL: 2CVE-2005-1115
https://notcve.org/view.php?id=CVE-2005-1115
Multiple cross-site scripting (XSS) vulnerabilities in Photo Album 2.0.53 module for phpBB allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) album_cat.php or (2) album_comment.php. • http://marc.info/?l=bugtraq&m=111343406309969&w=2 http://www.digitalparadox.org/advisories/phpbbp.txt http://www.securityfocus.com/bid/13157 http://www.securityfocus.com/bid/13158 •
CVSS: 7.5EPSS: 0%CPEs: 19EXPL: 1CVE-2005-1114
https://notcve.org/view.php?id=CVE-2005-1114
Multiple SQL injection vulnerabilities in album_search.php in Photo Album 2.0.53 for phpBB allow remote attackers to execute arbitrary SQL commands via the (1) mode or (2) search parameters. • http://marc.info/?l=bugtraq&m=111343406309969&w=2 http://www.digitalparadox.org/advisories/phpbbp.txt http://www.osvdb.org/15931 http://www.securityfocus.com/bid/13155 https://exchange.xforce.ibmcloud.com/vulnerabilities/20086 •