PT-2010-3921 · Yamamah · Yamamah Photo Gallery

Ant!-Tr0J4N · Published 2010-06-18 · Updated 2010-06-24 · CVE-2010-2335

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Yamamah Photo Gallery version 1.00

Description The issue allows remote attackers to execute arbitrary SQL commands via the news parameter in index.php.

Recommendations For Yamamah Photo Gallery version 1.00, update to a version released after 20100618 to resolve the issue.

Exploit

Fix

RCE

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2010-2335

Affected Products

Yamamah Photo Gallery

References · 6

• 🔥 https://exploit-db.com/exploits/13845 · Exploit
• 🔥 http://exploit-db.com/exploits/13845 · Exploit
• 🔥 https://exploit-db.com/exploits/11947 · Exploit
• http://yamamah.org/home/?page=39 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2335 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2335 · Note