← Back

Rsgallery2

rsgallery2

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Com Rsgallery2
com_rsgallery2
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2012-4235
1Rsgallery2
1Com Rsgallery2
Apr 29, 2026
Aug 10, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The RSGallery2 (com_rsgallery2) component before 3.2.0 for Joomla! 2.5.x does not place index.html files in image directories, which allows remote attackers to list image filenames via a request for a directory URI.
CVE-2012-4071
1Rsgallery2
1Com Rsgallery2
Apr 29, 2026
Aug 10, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the comments module in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, allows remote attackers to inject arbitrary...Show more
Cross-site scripting (XSS) vulnerability in the comments module in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, allows remote attackers to inject arbitrary web script or HTML via crafted BBCode markup in a comment.Show less
CVE-2012-3554
1Rsgallery2
1Com Rsgallery2
Apr 29, 2026
Aug 10, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, allows remote attackers to execute arbitrary SQL commands via unspecified vecto...Show more
SQL injection vulnerability in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Show less