PT-2012-6230

Name of the Vulnerable Software and Affected Versions YABSoft Advanced Image Hosting AIH Script version 2.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the gal parameter in the view comments.php file. Recommendations For version 2.3, updat...