7.6
Élevée
CVE-2026-49771 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Photo…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Photo Gallery by 10Web allows Blind SQL Injection. This issue affects Photo Gallery by 10Web: from n/a through 1.8.41.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Photo Gallery by 10Web 1.8 | premières → 1.8.41 | Pas de correctif indiqué |
Autres CVE de Photo Gallery by 10Web
Les 6 CVE de Photo Gallery by 10Web →
CVE-2026-42715
Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions
7.1
Élevée
CVE-2026-102377
Contributor PHP Object Injection in Photo Gallery by 10Web <= 1.8.46 versions
8.8
Élevée
CVE-2026-32330
Cross-Site Request Forgery (CSRF) vulnerability in 10Web Photo Gallery by 10Web photo-gallery allows Cross Site…
4.3
Moyenne
CVE-2026-27360
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Photo…
5.9
Moyenne