Ktools - vulnerabilities (CVEs)

6 CVEs in 3 products, 0 in the last 30 days, newest from 2017-04-12.

Products

CVE-2016-4337 - CVSS 9.8 (critical), 2017-04-12: SQL injection vulnerability in the mgr.login.php file in Ktools.net Photostore before 4.7.5 allows remote attackers to execute arbitrary SQL commands via the…
CVE-2008-6649 - CVSS 7.5 (high), 2009-04-07: SQL injection vulnerability in manager/image_details_editor.php in Ktools PhotoStore 2.5, 2.9.8, 3.1.0, and other versions through 3.5.2 allows remote…
CVE-2008-6648 - CVSS 7.5 (high), 2009-04-07: SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter…
CVE-2008-6647 - CVSS 7.5 (high), 2009-04-07: SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to execute arbitrary SQL commands via the gid parameter.
CVE-2009-0363 - CVSS 7.5 (high), 2009-02-17: Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving (1) a crafted…
CVE-2005-3863 - CVSS 7.5 (high), 2005-11-29: Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4)…