Ktools

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 6
    Known Exploited: 0
    1
    Critical Level Threats
    5
    High Level Threats
    0
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2016-4337

    SQL injection vulnerability in the mgr.login.php file in Ktools.net Photostore before 4.7.5 allows remote attackers to execute arbitrary SQL commands via the email parameter in a recover_login action.

    Last Modified: Apr 20, 2025
    Published: Apr 12, 2017

    CVE-2008-6647

    SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to execute arbitrary SQL commands via the gid parameter.

    Last Modified: Apr 23, 2026
    Published: Apr 07, 2009

    CVE-2008-6648

    SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter to about_us.php. NOTE: this might be the same issue as CVE-2008-6647.

    Last Modified: Apr 23, 2026
    Published: Apr 07, 2009

    CVE-2008-6649

    SQL injection vulnerability in manager/image_details_editor.php in Ktools PhotoStore 2.5, 2.9.8, 3.1.0, and other versions through 3.5.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.

    Last Modified: Apr 23, 2026
    Published: Apr 07, 2009

    CVE-2009-0363

    Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving (1) a crafted zcrypt message, related to zcrypt.c; (2) a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the products.

    Last Modified: Apr 23, 2026
    Published: Feb 17, 2009
    Items Per Page