CVE-2009-1650

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) albumID, (2) tagID, and (3) photoID parameters to index.html.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.99% chance of exploitation in the next 30 days, 60th percentile

Published

2009-05-16

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/8679

References

• CVE Record
• NVD entry

Related

• CVE-2009-1649
• CVE-2009-1651
• CVE-2009-1647
• CVE-2009-1652
• CVE-2009-1646
• CVE-2009-1653