CVEvulnerability
CVE-2009-1650
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-05-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) albumID, (2) tagID, and (3) photoID parameters to index.html.
Affected configurations
• tenfourzero shutter 0.1.1
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/35049 Vendor Advisory
- http://www.securityfocus.com/archive/1/503493 Exploit
- http://www.securityfocus.com/bid/34967 Exploit
- https://www.exploit-db.com/exploits/8679 www.exploit-db.com
- http://secunia.com/advisories/35049 Vendor Advisory
- http://www.securityfocus.com/archive/1/503493 Exploit
- http://www.securityfocus.com/bid/34967 Exploit
- https://www.exploit-db.com/exploits/8679 www.exploit-db.com