3 matches found
Sql injection
SQL injection vulnerability in index.php in NITRO Web Gallery allows remote attackers to execute arbitrary SQL commands via the PictureId parameter in an open action...
7.5CVSS9.1AI score0.02045EPSS
SaveExploits2References4Affected Software1
CVE-2010-2141
CVE-2010-2141 affects the NITRO Web Gallery. The vulnerability is an SQL injection in index.php, exploitable via the PictureId parameter in an open action, allowing remote attackers to run arbitrary SQL commands. The issue is documented across multiple sources (NVD/NVD mirrors, CVE records, and a...
7.5CVSS8.7AI score0.02045EPSS
SaveExploits2References4Affected Software1
20