7.6
High
CVE-2026-49771 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Photo…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Photo Gallery by 10Web allows Blind SQL Injection. This issue affects Photo Gallery by 10Web: from n/a through 1.8.41.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Photo Gallery by 10Web 1.8 | earliest → 1.8.41 | No fix stated |
Other CVEs of Photo Gallery by 10Web
The 6 CVEs of Photo Gallery by 10Web →
CVE-2026-42715
Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions
7.1
High
CVE-2026-102377
Contributor PHP Object Injection in Photo Gallery by 10Web <= 1.8.46 versions
8.8
High
CVE-2026-32330
Cross-Site Request Forgery (CSRF) vulnerability in 10Web Photo Gallery by 10Web photo-gallery allows Cross Site…
4.3
Medium
CVE-2026-27360
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Photo…
5.9
Medium