SQL Injection in Yamamah

CVE-2010-2335

SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to execute arbitrary SQL commands via the news parameter.

Vulnerability class: SQL Injection

EPSS: 0.010 (59.6th percentile) — read the EPSS interpretation.

Affected products

  • Yamamah — versions 1.00
  • N/a — versions n/a

Weakness classification (CWE)

References