CVE Tools
Track your stack

Photopost

18 CVEs tracked since 2004. Since Mar 2004, none of them reached CISA KEV.

Photopost CVEs per month

Mar 2004 to Sep 2006. Point at a month, or focus the strip and use the arrow keys.
Photopost CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2004-0320
2004-04null or fewer
2004-05null or fewer
2004-06null or fewer
2004-07null or fewer
2004-08null or fewer
2004-09null or fewer
2004-10null or fewer
2004-11null or fewer
2004-12null or fewer
2005-01null or fewer
2005-0250
2005-0360
2005-04null or fewer
2005-0530
2005-06null or fewer
2005-07null or fewer
2005-08null or fewer
2005-09null or fewer
2005-10null or fewer
2005-11null or fewer
2005-12null or fewer
2006-01null or fewer
2006-02null or fewer
2006-03null or fewer
2006-04null or fewer
2006-05null or fewer
2006-06null or fewer
2006-07null or fewer
2006-08null or fewer
2006-0920

Products

The products that kept showing up in Photopost's monthly top three, with their CVEs summed over those months.

  1. Photopost PHP Pro155 months
  2. Reviewpost PHP Pro31 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Photopost.

  1. CVE-2008-7088Unrestricted file upload vulnerability in upload.php in PhotoPost vBGallery 2.4.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension follow...6.5
  2. CVE-2008-0251Unrestricted file upload vulnerability in PhotoPost vBGallery before 2.4.2 allows remote attackers to upload and execute arbitrary files via unknown vectors.10.0
  3. CVE-2006-4990Multiple PHP remote file inclusion vulnerabilities in PhotoPost allow remote attackers to execute arbitrary PHP code via a URL in the PP_PATH parameter in (1) addfav.php, (2) adm-admlog.php, (3) ad...7.5
  4. CVE-2006-4828PHP remote file inclusion vulnerability in zipndownload.php in PhotoPost 4.0 through 4.6 allows remote attackers to execute arbitrary PHP code via a URL in the PP_PATH parameter.7.5
  5. CVE-2005-2737Cross-site scripting (XSS) vulnerability in PhotoPost PHP Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.4.3
  6. CVE-2005-1629SQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to execute arbitrary SQL commands via the verifykey parameter.7.5
  7. CVE-2004-1871Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ppuser, (2) password, (3) stype,...4.3
  8. CVE-2004-1870Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users' passwords via the (1) photo parameter to addfav.php, (2) photo parameter to comme...7.5
  9. CVE-2005-0928Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 5.x allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) password, (3) ppuser, (4) sort, or (5...4.3
  10. CVE-2005-0778PhotoPost PHP 5.0 RC3 does not fully verify that an uploaded file is an image file, which allows remote attackers to inject arbitrary Javascript by uploading non-image files with an image extension...5.0
  11. CVE-2005-0776adm-photo.php in PhotoPost PHP 5.0 RC3 does not properly verify administrative privileges before manipulating photos, which could allow remote attackers to manipulate other users' photos.5.0
  12. CVE-2005-0777Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP 5.0 RC3 allow remote attackers to inject arbitrary web script or HTML via (1) the check_tags function or (2) the editbio field i...4.3
  13. CVE-2005-0774SQL injection vulnerability in member.php and possibly other scripts in PhotoPost PHP 5.0 RC3 allows remote attackers to execute arbitrary SQL commands via the uid parameter.7.5
  14. CVE-2005-0775The reportpost action in misc.php for PhotoPost PHP 5.0 RC3 does not limit the logging data that is sent to the administrator, which allows remote attackers to send large amounts of email to the ad...7.5
  15. CVE-2005-0273Multiple SQL injection vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) ppuser parameter.7.5

The record

Peak rank
#17 in Mar 2005
Busiest month shown
Mar 2005, 6 CVEs
Months with a KEV entry
0 since Mar 2004
Monthly snapshots
5 since 2004
Photopost's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store