Fred777

**Name of the Vulnerable Software and Affected Versions** ibPhotohost version 1.1.2 **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `img` parameter in the "index.php" file. **Recommendations** For ibPhotohost version 1.1.2, update to a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Invision Power Board (nv2) Awards version 1.1.0 **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the `id` parameter in a 'view' action within the index.php file. **Recommendations** For version 1.1.0, avoid using the `id` parameter in the affected API endpoint until the issue is resolved. As a temporary workaround, consider restricting access to the index.php file to minimize the risk of exploitation.