Yamamah

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Yamamah records in CISA KEV

No Yamamah vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Yamamah 5 records LOW

Records

5 records

TI-2010-01255 CVE-2010-1300 · GHSA-fhmv-33cj-m938

SQL injection vulnerability in index.php in Yamamah (aka Dove Photo Album) 1.00 allows…

LOW 37

SQL injection vulnerability in index.php in Yamamah (aka Dove Photo Album) 1.00 allows remote attackers to execute arbitrary SQL commands via the calbums parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01912 Published 2010-04-07 No fix listed CWE-89

TI-2010-02242 CVE-2010-2335 · GHSA-8wwv-7vpf-r76g

SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed…

LOW 35

SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to execute arbitrary SQL commands via the news parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01012 Published 2010-06-18 No fix listed CWE-89

TI-2010-02241 CVE-2010-2334 · GHSA-36vj-6865-3335

Directory traversal vulnerability in themes/default/download.php in Yamamah Photo Gallery…

LOW 29

Directory traversal vulnerability in themes/default/download.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03177 Published 2010-06-18 No fix listed CWE-22

TI-2010-02243 CVE-2010-2336 · GHSA-pq4m-gxfg-5hgm

index.php in Yamamah Photo Gallery 1.00 allows remote attackers to obtain the source code…

LOW 27

index.php in Yamamah Photo Gallery 1.00 allows remote attackers to obtain the source code of executable files within the web document root via the download parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02353 Published 2010-06-18 No fix listed CWE-200

TI-2011-03380 CVE-2011-3823 · GHSA-j4qh-c9qr-5m4w

Yamamah 1.0 allows remote attackers to obtain sensitive information via a direct request…

LOW 25

Yamamah 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/default/index.php and certain ot…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01229 Published 2011-09-24 No fix listed CWE-200

Open these records in search →

Critical	0
High	2
Medium	3
Low	0
No CVSS	0