CVE-2010-2335

  • Last update: Apr 13, 2023

Description

SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to execute arbitrary SQL commands via the news parameter.

Software From Fixed in
yamamah / yamamah 1.00 1.00.x

Details

    • Severity: High
  • CVE: CVE-2010-2335
  • Published: Jun 18, 2010
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs

OWASP TOP 10