8.5 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.1%
Multiple SQL injection vulnerabilities in Fixit iDMS Pro Image Gallery allow remote attackers to execute arbitrary SQL commands via the (1) show_id or (2) parentid parameter to (a) filelist.asp, or the (3) fid parameter to (b) showfile.asp.
securitytracker.com/id?1017281
www.aria-security.com/forum/showthread.php?t=39
www.securityfocus.com/archive/1/452567/100/0/threaded
www.securityfocus.com/bid/21282
exchange.xforce.ibmcloud.com/vulnerabilities/30513