CVE-2010-2335

SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to execute arbitrary SQL commands via the news parameter.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.01% chance of exploitation in the next 30 days, 61th percentile

Published

2010-06-18

Updated

2024-09-16

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/13845

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/13845
• https://www.exploit-db.com/exploits/11947

References

• CVE Record
• NVD entry

Related

• CVE-2010-2334
• CVE-2010-2336
• CVE-2010-2333
• CVE-2010-2338
• CVE-2010-2332
• CVE-2010-2340