CVE-2010-1364

The CVE-2010-1364 entry describes a SQL injection vulnerability in the Uiga Personal Portal’s index.php, exploitable via the id parameter in the photos action. The underlying issue is likely improper input handling/sanitization allowing arbitrary SQL execution by remote attackers. Affected softwa...

CVE-2012-4056

The CVE-2012-4056 entry concerns a SQL injection in index2.php of the Uiga Personal Portal, exploitable via the p parameter. The vulnerability, described in the NVD entry, could let remote attackers execute arbitrary SQL commands, with a network-based, low-complexity attack that requires no authe...