Photostore

photostore

Vendor: Ktools • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-4337 1Ktools 1Photostore May 13, 2026 Apr 12, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SQL injection vulnerability in the mgr.login.php file in Ktools.net Photostore before 4.7.5 allows remote attackers to execute arbitrary SQL commands via the email parameter in a recover_login action.
CVE-2008-6649 1Ktools 1Photostore Apr 23, 2026 Apr 7, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in manager/image_details_editor.php in Ktools PhotoStore 2.5, 2.9.8, 3.1.0, and other versions through 3.5.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-6648 1Ktools 1Photostore Apr 23, 2026 Apr 7, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter to about_us.php. NOTE: this might be the same issue as CVE-2...Show more SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter to about_us.php. NOTE: this might be the same issue as CVE-2008-6647.Show less
CVE-2008-6647 1Ktools 1Photostore Apr 23, 2026 Apr 7, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to execute arbitrary SQL commands via the gid parameter.