Vulnerabilities

TI-2012-04164 CVE-2012-4926 · GHSA-w466-q2rw-4mm2

approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows…

LOW 32

approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the activation of administrators via the u parameter in an (1) app0 (disable) or (2) app1 (enable) action.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01899 Published 2012-09-15 No fix listed CWE-287

TI-2012-04163 CVE-2012-4925 · GHSA-m37m-4cgc-j46h

Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow…

LOW 35

Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow remote attackers to execute arbitrary SQL commands via the u parameter in a (1) app0 or (2) app1 action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01238 Published 2012-09-15 No fix listed CWE-89

Vulnerabilities

Filters

approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows…

Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow…