Vulnerability Details CVE-2005-0774
SQL injection vulnerability in member.php and possibly other scripts in PhotoPost PHP 5.0 RC3 allows remote attackers to execute arbitrary SQL commands via the uid parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.8%
CVSS Severity
CVSS v2 Score 7.5
References
- http://marc.info/?l=bugtraq&m=111065868402859&w=2
- http://secunia.com/advisories/14576
- http://www.securityfocus.com/bid/12779
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19675
- http://marc.info/?l=bugtraq&m=111065868402859&w=2
- http://secunia.com/advisories/14576
- http://www.securityfocus.com/bid/12779
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19675
Products affected by CVE-2005-0774
-
cpe:2.3:a:photopost:photopost_php_pro:5.0_rc3