7.5
CVSSv2

CVE-2010-4791

Published: 27/04/2011 Updated: 17/08/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in infusions/mg_user_fotoalbum_panel/mg_user_fotoalbum.php in the MG User-Fotoalbum (mg_user_fotoalbum_panel) module 1.0.1 for PHP-Fusion allows remote malicious users to execute arbitrary SQL commands via the album_id parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

marcusg mg_user_fotoalbum_panel 1.0.1

Exploits

----------------------------Information------------------------------------------------ +Name : PHP-Fusion mg user fotoalbum 101 <= SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 10102010 +Script : PHP-Fusion mg user fotoalbum 101 +Download : phpfusionmarcusgde/downloadsphp?page_id=67 +Price : free ...