Vulnerability Details CVE-2010-4791
SQL injection vulnerability in infusions/mg_user_fotoalbum_panel/mg_user_fotoalbum.php in the MG User-Fotoalbum (mg_user_fotoalbum_panel) module 1.0.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the album_id parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.014
EPSS Ranking 79.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://packetstormsecurity.org/1010-exploits/phpfusionmguser-sql.txt
- http://secunia.com/advisories/41752
- http://securityreason.com/securityalert/8219
- http://www.exploit-db.com/exploits/15227
- http://www.securityfocus.com/bid/43901
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62382
- http://packetstormsecurity.org/1010-exploits/phpfusionmguser-sql.txt
- http://secunia.com/advisories/41752
- http://securityreason.com/securityalert/8219
- http://www.exploit-db.com/exploits/15227
- http://www.securityfocus.com/bid/43901
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62382
Products affected by CVE-2010-4791
-
cpe:2.3:a:marcusg:mg_user_fotoalbum_panel:1.0.1
-
cpe:2.3:a:php-fusion:php-fusion:-
-
cpe:2.3:a:php-fusion:php-fusion:4.01
-
cpe:2.3:a:php-fusion:php-fusion:6.01.10
-
cpe:2.3:a:php-fusion:php-fusion:6.01.15
-
cpe:2.3:a:php-fusion:php-fusion:6.01.9
-
cpe:2.3:a:php-fusion:php-fusion:7.00.1
-
cpe:2.3:a:php-fusion:php-fusion:7.02.01
-
cpe:2.3:a:php-fusion:php-fusion:7.02.02
-
cpe:2.3:a:php-fusion:php-fusion:7.02.03
-
cpe:2.3:a:php-fusion:php-fusion:7.02.04
-
cpe:2.3:a:php-fusion:php-fusion:7.02.05
-
cpe:2.3:a:php-fusion:php-fusion:7.02.06
-
cpe:2.3:a:php-fusion:php-fusion:7.02.07
-
cpe:2.3:a:php-fusion:php-fusion:8.00.00
-
cpe:2.3:a:php-fusion:php-fusion:8.00.19
-
cpe:2.3:a:php-fusion:php-fusion:8.00.20
-
cpe:2.3:a:php-fusion:php-fusion:8.00.21
-
cpe:2.3:a:php-fusion:php-fusion:9.0
-
cpe:2.3:a:php-fusion:php-fusion:9.00
-
cpe:2.3:a:php-fusion:php-fusion:9.03
-
cpe:2.3:a:php-fusion:php-fusion:9.03.00
-
cpe:2.3:a:php-fusion:php-fusion:9.03.10
-
cpe:2.3:a:php-fusion:php-fusion:9.03.20
-
cpe:2.3:a:php-fusion:php-fusion:9.03.30
-
cpe:2.3:a:php-fusion:php-fusion:9.03.40
-
cpe:2.3:a:php-fusion:php-fusion:9.03.50
-
cpe:2.3:a:php-fusion:php-fusion:9.03.60
-
cpe:2.3:a:php-fusion:php-fusion:9.03.70
-
cpe:2.3:a:php-fusion:php-fusion:9.03.80
-
cpe:2.3:a:php-fusion:php-fusion:9.03.90