CVE-2007-0786

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-02-06 · updated 2026-06-16

Description

SQL injection vulnerability in view.php in Noname Media Photo Galerie Standard 1.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

Noname Media Photo Galerie Standard: through 1.1.1; 1.1

References

http://osvdb.org/33089
http://secunia.com/advisories/24029
http://www.securityfocus.com/bid/22384
http://www.vupen.com/english/advisories/2007/0475
https://exchange.xforce.ibmcloud.com/vulnerabilities/32171
https://www.exploit-db.com/exploits/3261
http://osvdb.org/33089
http://secunia.com/advisories/24029
http://www.securityfocus.com/bid/22384
http://www.vupen.com/english/advisories/2007/0475
https://exchange.xforce.ibmcloud.com/vulnerabilities/32171
https://www.exploit-db.com/exploits/3261

Get alerted when CVE-2007-0786 or the next vulnerability affects your stack