Vulnerability in Photopost Php Pro

CVE-2005-0929

SQL injection vulnerability in PhotoPost PHP Pro 5.x may allow remote attackers to execute arbitrary SQL commands via (1) the sl parameter to showmembers.php or (2) the photo parameter to showphoto.php.

EPSS: 0.026 (83.8th percentile) — read the EPSS interpretation.

Affected products

Photopost Photopost_php_pro — versions 5.0_rc3
N/a — versions n/a

References

cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)