CVE-2009-1650

2009-05-1618:00:00

mitre

www.cve.org

AI Score

8.5

Confidence

Low

EPSS

0.001

Percentile

27.8%

JSON

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) albumID, (2) tagID, and (3) photoID parameters to index.html.

References

secunia.com/advisories/35049

www.securityfocus.com/archive/1/503493

www.securityfocus.com/bid/34967

www.exploit-db.com/exploits/8679