PT-2007-4732 · Elkagroup · Elkagroup Image Gallery
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
elkagroup Image Gallery version 1.0
Description
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the
pid parameter in the property.php file.Recommendations
For elkagroup Image Gallery version 1.0, consider restricting access to the property.php file or the
pid parameter to minimize the risk of exploitation.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Elkagroup Image Gallery