SQL Injection Vulnerability in Ace Image Hosting Script
CVE-2007-6393

Currently unrated

Key Information:

Vendor

Ace Image Hosting Script

Status
Ace Image Hosting Script
Vendor
CVE Published:
17 December 2007

What is CVE-2007-6393?

An SQL injection vulnerability exists in the albums.php file of the Ace Image Hosting Script. This flaw enables remote authenticated users to manipulate the database by executing arbitrary SQL commands through the 'id' parameter in editalbum mode. Exploitation of this vulnerability can lead to unauthorized access to sensitive data and potential compromise of the hosting environment.

References

http://secunia.com/advisories/27988
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/26780
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/38941
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.