Davlin Thickbox Gallery — known CVE vulnerabilities

Every CVE whose affected-product data names Davlin Thickbox Gallery, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2009-1625 — CVSS 6.8 (medium): Directory traversal vulnerability in index.php in Thickbox Gallery 2 allows remote attackers to include and execute arbitrary local files…
• CVE-2008-3859 — CVSS 5.0 (medium): Davlin Thickbox Gallery 2 allows remote attackers to obtain the administrative username and MD5 password hash via a direct request to…