CVE-2014-9312

披露于 2017/08/28 · 更新于 2025/07/12

CVSS 评分8.8/ 10.0

EPSS 概率76.5%百分位 98.9%

漏洞描述

Unrestricted File Upload vulnerability in Photo Gallery 1.2.5.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 photo_gallery 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2021-24139RCE 10Web Photo Gallery < 1.5.55 - SQL Injection photo_gallery	严重	—	—	PoCEXP	2026/01/30
photo_gallery_xss Photo Gallery < 1.7.1 - Cross-Site Scripting photo_gallery	中危	—	—	PoCEXP	2023/11/27
CVE-2022-0169 Photo Gallery by 10Web < 1.6.0 - SQL Injection photo_gallery	严重	9.8	52.2%	PoCEXP	2022/03/14
CVE-2021-24291 WordPress Photo Gallery by 10Web <1.5.69 - Cross-Site Scripting photo_gallery	中危	6.1	14.6%	PoCEXP	2021/05/14