Minigal

6 CVEs across 3 Minigal products. Browse Minigal vulnerabilities, severities, and proof-of-concept exploits.

Minigal products with known CVEs

ProductCVEs
Minigal3
Minigal Nano2
Mg21
Minigal CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-25869High7.52026-02-11MiniGal Nano versions 0.3.5 and prior contain a path traversal vulnerability in index.php via the dir parameter. The application appends user-controlled input…
CVE-2026-25868Medium6.12026-02-11MiniGal Nano version 0.3.5 and prior contain a reflected cross-site scripting (XSS) vulnerability in index.php via the dir parameter. The application construct…
CVE-2008-69332009-08-11Directory traversal vulnerability in index.php in MiniGal b13 (aka MG2) allows remote attackers to read the source code of .php files, and possibly the content…
CVE-2008-12282008-03-10Cross-site scripting (XSS) vulnerability in admin.php in MG2 (formerly Minigal) allows remote attackers to inject arbitrary web script or HTML via the list par…
CVE-2007-21462007-04-19The imagecomments function in classes.php in MiniGal b13 allow remote attackers to inject arbitrary PHP code into a file in the thumbs/ directory via the (1) n…
CVE-2007-21452007-04-19The imagecomments function in classes.php in MiniGal b13 allows remote attackers to inject arbitrary PHP code into a file in the thumbs/ directory via the inpu…