medium6.8
CVE-2007-4437
SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to execute arbitrary SQL commands via the match parameter.
Impact
SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to execute arbitrary SQL commands via the match parameter. NOTE: some details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ampache | Ampache | through 3.3.3.4 |
References
- NVD record
- CVE.org record
- http://bugs.gentoo.org/show_bug.cgi?id=189607
- http://osvdb.org/38276
- http://secunia.com/advisories/26542
- http://secunia.com/advisories/27253
- http://security.gentoo.org/glsa/glsa-200710-13.xml
- http://www.ampache.org/announce/3_3_3_5.php
- http://www.securityfocus.com/bid/25362
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36121
- http://bugs.gentoo.org/show_bug.cgi?id=189607
- http://osvdb.org/38276
- http://secunia.com/advisories/26542
- http://secunia.com/advisories/27253
- http://security.gentoo.org/glsa/glsa-200710-13.xml
- http://www.ampache.org/announce/3_3_3_5.php
- http://www.securityfocus.com/bid/25362
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36121