SQL Injection Vulnerabilities in Photokorn Gallery by Photokorn
CVE-2009-4979

Currently unrated

Key Information:

Vendor: Keil-software
Status: Photokorn Gallery
Vendor: CVE Published:; 25 August 2010

🔔 Create Keil-software Vulnerability Alert

What is CVE-2009-4979?

Multiple SQL injection vulnerabilities exist in the search.php script of Photokorn Gallery versions 1.81 and earlier. These vulnerabilities allow attackers to manipulate SQL queries by exploiting the (1) where[], (2) sort, (3) order, and (4) Match parameters, potentially enabling them to execute arbitrary SQL commands. Organizations using these versions are advised to implement security measures to protect against unauthorized database access and ensure the integrity of their web applications.

References

http://www.securityfocus.com/bid/35966

vdb-entryx_refsource_BID

http://secunia.com/advisories/36150

third-party-advisoryx_refsource_SECUNIA

http://holisticinfosec.org/content/view/120/45/

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Oct 3, 2022
Vulnerability published
Aug 25, 2010

CVE-2009-4979 Data

JSON