CVE-2016-4337

CVE-2016-4337 affects Ktools Photostore prior to 4.7.5. The vulnerability is a SQL injection in the admin password-recovery flow (mgr.login.php, recover_login action) that allows remote attackers to execute arbitrary SQL via the email parameter. Publicly documented as a pre-authentication, blind ...

CVE-2016-4337

creationtimestamp| type| source ---|---|--- 2016-06-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40046...