Filtered by vendor Nitropowered Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2008-2817 1 Nitropowered 1 Nitro Web Gallery 2017-09-29 N/A
SQL injection vulnerability in albums.php in NiTrO Web Gallery 1.4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the CatId parameter in a show action.
CVE-2010-2141 1 Nitropowered 1 Nitro Web Gallery 2017-08-17 N/A
SQL injection vulnerability in index.php in NITRO Web Gallery allows remote attackers to execute arbitrary SQL commands via the PictureId parameter in an open action.