Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.3	EPSS 0.2%	CVE-2026-39785Gmedia Photo Gallery · SQL Injection Critical9.3EPSS 0.2%2026-10-06CVE Database V5CVE-2026-39785 CVE-2026-39785 is a critical SQL Injection vulnerability in Serhii Pasyuk's Gmedia Photo Gallery affecting versions up to 1.25.1. The flaw allows an attacker to perform Blind SQL Injection due to improper neutralization of special elements in SQL commands. This vulnerability can lead to high confidentiality impact and partial availability impact without requiring user interaction or privileges. EPSS 0.2%Vulnerability Serhii Pasyuk #cwe-89	CVE Database V5	2026-10-06
Medium	4.3	EPSS 0.1%	CVE-2025-63014Gmedia Photo Gallery · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-12-31CVE Database V5CVE-2025-63014 Cross-Site Request Forgery (CSRF) vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Cross Site Request Forgery.This issue affects Gmedia Photo Gallery: from n/a through <= 1.25.0. EPSS 0.1%Vulnerability Serhii Pasyuk	CVE Database V5	2025-12-31
High	7.5	EPSS 0.7%	CVE-2025-53257Gmedia Photo Gallery · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High7.5EPSS 0.7%2025-06-27CVE Database V5CVE-2025-53257 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows PHP Local File Inclusion.This issue affects Gmedia Photo Gallery: from n/a through <= 1.23.0. EPSS 0.7%Vulnerability Serhii Pasyuk	CVE Database V5	2025-06-27

Showing 1–3 of 3 results