high7.5Public exploit code
CVE-2009-0531
SQL injection vulnerability in gallery/view.asp in A Better Member-Based ASP Photo Gallery before 1.2 allows remote attackers to execute arbitrary SQL commands…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- A Better Member-Based ASP Photo Gallery - 'entry' SQL Injection2009-02-09 · webapps · php · Verified
Impact
SQL injection vulnerability in gallery/view.asp in A Better Member-Based ASP Photo Gallery before 1.2 allows remote attackers to execute arbitrary SQL commands via the entry parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ontarioabandonedplaces | A Better Member-Based Asp Photo Gallery | through 1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/33874
- http://www.ontarioabandonedplaces.com/ipguardian/gallery/readme.txt
- http://www.securityfocus.com/bid/33693
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48612
- https://www.exploit-db.com/exploits/8012
- http://secunia.com/advisories/33874
- http://www.ontarioabandonedplaces.com/ipguardian/gallery/readme.txt
- http://www.securityfocus.com/bid/33693
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48612
- https://www.exploit-db.com/exploits/8012