Vulnerability Details CVE-2009-0728
SQL injection vulnerability in the My_eGallery module for MAXdev MDPro (MD-Pro) and Postnuke allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showpic action to index.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.6%
CVSS Severity
CVSS v2 Score 7.5
References
Products affected by CVE-2009-0728
-
cpe:2.3:a:maxdev:md-pro:*
-
cpe:2.3:a:maxdev:my_egallery:-
-
cpe:2.3:a:postnuke:postnuke:0.750
-
cpe:2.3:a:postnuke:postnuke:0.760