CVE-2005-3986

Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter in portfolio.php and (2) cid parameter in content.php.
Configurations

Configuration 1 (hide)

cpe:2.3:a:verosky_media:instant_photo_gallery:*:*:*:*:*:*:*:*

History

21 Nov 2024, 00:03

Type Values Removed Values Added
References () http://pridels0.blogspot.com/2005/11/instant-photo-gallery-sql-inj-vuln.html - () http://pridels0.blogspot.com/2005/11/instant-photo-gallery-sql-inj-vuln.html -
References () http://secunia.com/advisories/17841 - Vendor Advisory () http://secunia.com/advisories/17841 - Vendor Advisory
References () http://www.osvdb.org/21334 - () http://www.osvdb.org/21334 -
References () http://www.osvdb.org/21335 - () http://www.osvdb.org/21335 -
References () http://www.securityfocus.com/bid/15659 - () http://www.securityfocus.com/bid/15659 -
References () http://www.vupen.com/english/advisories/2005/2670 - () http://www.vupen.com/english/advisories/2005/2670 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/23350 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/23350 -

Information

Published : 2005-12-04 22:03

Updated : 2024-11-21 00:03


NVD link : CVE-2005-3986

Mitre link : CVE-2005-3986

CVE.ORG link : CVE-2005-3986


JSON object : View

Products Affected

verosky_media

  • instant_photo_gallery