Nitropowered: Security Vulnerabilities
SQL injection vulnerability in index.php in NITRO Web Gallery allows remote attackers to execute arbitrary SQL commands via the PictureId parameter in an open action.
CVSS Score
7.5
EPSS Score
0.008
Published
2010-06-02
SQL injection vulnerability in albums.php in NiTrO Web Gallery 1.4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the CatId parameter in a show action.
CVSS Score
7.5
EPSS Score
0.001
Published
2008-06-23