high7.5Public exploit code
CVE-2012-6039
SQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script, possibly 2.3, allows remote attackers to execute arbitrary SQL…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Advanced Image Hosting Script - SQL Injection2012-01-12 · webapps · php · Verified
Impact
SQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script, possibly 2.3, allows remote attackers to execute arbitrary SQL commands via the gal parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yabsoft | Advanced Image Hosting Script | All versions Version 2.3 |