Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3020▼ 63 respecto a la semana anterior
Críticas / altas1413▲ 57 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.3) | 1.1% | — | Uapplication Uphotogallery | 7/2/2007 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in images_archive.asp in Uapplication Uphotogallery 1.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the s parameter. NOTE: the thumbnails.asp vector is already covered by CVE-2006-3023. | |
| Modificada | Alta (7.5) | 1.2% | — | Uapplication Uphotogallery | 4/12/2006 | 16/6/2026 | Multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1 allow remote attackers to execute arbitrary SQL commands via the ci parameter to (1) slideshow.asp or (2) thumbnails.asp. | |
| Modificada | Media (4.3) | 1.8% | — | Uapplication Uphotogallery | 15/6/2006 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in thumbnails.asp in Uapplication Uphotogallery 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) s and (2) block parameters. | |
| Modificada | Alta (7.5) | 1.5% | — | Uapplication UphotogalleryAI | 3/5/2005 | 16/6/2026 | edit_image.asp in Uapplication Uphotogallery allows remote attackers to upload arbitrary files. | |
| Modificada | Alta (7.5) | 1.7% | — | Uapplication Uphotogallery | 3/5/2005 | 16/6/2026 | Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request to uphotogallery.mdb. |