CVE-2010-1300

EPSS 1.9%

SQL injection vulnerability in index.php in Yamamah (aka Dove Photo Album) 1.00 allows remote attackers to execute arbitrary SQL commands via the calbums parameter.

Affected products

n/a · n/a

public PoCs found — 8

cve_referencepacketstormsecurity.org/1003-exploits/yamamah-sql.txtunverified cve_referencewww.exploit-db.com/exploits/11947unverified cve_referencewww.exploit-db.com/exploits/13849unverified cve_referencewww.exploit-db.com/exploits/13857unverified exploitdbwww.exploit-db.com/exploits/13845unverified exploitdbwww.exploit-db.com/exploits/13849unverified exploitdbwww.exploit-db.com/exploits/11947unverified exploitdbwww.exploit-db.com/exploits/13857unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/63344 http://packetstormsecurity.org/1003-exploits/yamamah-sql.txt http://secunia.com/advisories/39205 https://exchange.xforce.ibmcloud.com/vulnerabilities/57415 https://exchange.xforce.ibmcloud.com/vulnerabilities/59404 http://www.exploit-db.com/exploits/11947 http://www.exploit-db.com/exploits/13849 http://www.exploit-db.com/exploits/13857 http://www.securityfocus.com/bid/39690