← Back

Keil Software

keil_software

4 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Photokorn Gallery
photokorn_gallery
3 CVEs
Photokorn
photokorn
1 CVE

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-4981
1Keil Software
1Photokorn Gallery
Apr 29, 2026
Aug 25, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Multiple cross-site request forgery (CSRF) vulnerabilities in Photokorn Gallery 1.81 allow remote attackers to hijack the authentication of administrators.
CVE-2009-4980
1Keil Software
1Photokorn Gallery
Apr 29, 2026
Aug 25, 2010
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in Photokorn Gallery 1.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) where[] parameter to search.php and (2) qc parameter to...Show more
Multiple cross-site scripting (XSS) vulnerabilities in Photokorn Gallery 1.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) where[] parameter to search.php and (2) qc parameter to admin.php.Show less
CVE-2009-4979
1Keil Software
1Photokorn Gallery
Apr 29, 2026
Aug 25, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in search.php in Photokorn Gallery 1.81 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) where[], (2) sort, (3) order, and (4) Match parameters.
CVE-2008-0297
1Keil Software
1Photokorn
Apr 23, 2026
Jan 16, 2008
N/A· v4
N/A· v3
5.0 MEDIUM· v2
PhotoKorn allows remote attackers to obtain database credentials via a direct request to update/update3.php, which includes the credentials in its output.