CVE-2010-2335

2010-06-1820:00:00

mitre

www.cve.org

sql injection

yamamah photo gallery

remote attackers

arbitrary sql commands

AI Score

8.4

Confidence

Low

EPSS

0.001

Percentile

50.5%

JSON

SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to execute arbitrary SQL commands via the news parameter.

References

www.exploit-db.com/exploits/13845

www.yamamah.org/home/?page=39