CVE-2010-2335

SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to execute arbitrary SQL commands via the news parameter.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.01% chance of exploitation in the next 30 days, 63rd percentile

Published

2010-06-18

Updated

2024-09-16

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/13845

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/13845
• https://www.exploit-db.com/exploits/11947

Security advisories

• http://www.yamamah.org/home/?page=39

References

• CVE Record
• NVD entry