Lucene search
HistorySep 03, 2010 - 6:00 p.m.
CVE-2010-3207
cve-2010-3207
sql injection
galeriashqip 1.0
vulnerability
remote attackers
arbitrary sql commands
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.6 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
45.1%
SQL injection vulnerability in index.php in GaleriaSHQIP 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the album_id parameter. NOTE: some of these details are obtained from third party information.
Affected configurations
Node
galeriashqipgaleriashqipMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| galeriashqip:galeriashqip | galeriashqip | eq | 1.0 |
Related
prion
prion
Sql injection
2010-09-03 18:00:00
cvelist
cvelist
CVE-2010-3207
2010-09-03 17:12:00
nvd
nvd
CVE-2010-3207
2010-09-03 18:00:04
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.6 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
45.1%
Related for CVE-2010-3207