VulnSocial

CVE-2019-25522Disclosure(xooscripts / xoogallery)

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

XooGallery Latest contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through the photo_id parameter. Attackers can send GET requests to photo.php with malicious photo_id values to extract sensitive data, bypass authentication, or modify database contents.

xooscripts CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • xoogallery

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 3 classified signals
  • Peaked 1d ago at 2 mentions (2026-03-12); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
xooscripts
Products
xoogallery

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-03-12: 2Mentions · 2026-03-13: 1Technical Details · 2026-03-12: 203-1203-13
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-122
Disclosure2
2026-03-131
Disclosure1
Full discourse3 posts
  • RedPacket Security@RedPacketSec
    Disclosure

    CVE Alert: CVE-2019-25522 - Xooscripts - XooGallery - https://www.redpacketsecurity.com/cve-alert-cve-2019-25522-xooscripts-xoogallery/ #OSINT #ThreatIntel #CyberSecurity #cve-2019-25522 #xooscripts #xoogallery

    Post summary

    RedPacket Security has released a CVE alert for CVE-2019-25522 affecting Xooscripts XooGallery, with no PoC, exploit code, patch, or evidence of active exploitation mentioned.

    0000075
    3.6K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2019-25522 XooGallery Latest contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through th… https://www.cve.org/CVERecord?id=CVE-2019-25522 ----- Traducción: CVE-2019-25522 Xoo… http://infoflow.cloud`

    Post summary

    The post announces CVE-2019-25522 in XooGallery, describing unauthenticated SQL injection vulnerabilities, but it does not provide a PoC, exploit, or patch information.

    0000026
    57 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2019-25522 XooGallery Latest contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through th… https://www.cve.org/CVERecord?id=CVE-2019-25522

    Post summary

    CVE‑2019‑25522 is a SQL injection vulnerability in XooGallery that allows unauthenticated attackers to manipulate database queries via injected SQL code, with no proof of concept, exploit, patch, or active exploitation mentioned.

    00000224
    56.7K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appxooscriptsxoogallery---

Explore more

Back to dashboardxooscripts CVEsxoogallery vulnerabilities