Verosky Media: >> Instant Photo Gallery >> 1.0.2 Security Vulnerabilities
SQL injection vulnerability in portfolio_photo_popup.php in Verosky Media Instant Photo Gallery 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, which is not cleansed before calling the count_click function in includes/functions/fns_std.php. NOTE: this issue could produce resultant XSS.
CVSS Score
6.8
EPSS Score
0.023
Published
2006-04-27