Unscored CVE-2005-0774 EUVD-2005-0775GHSA-4hmj-8phr-g9gx

SQL injection vulnerability in member.php and possibly other scripts in PhotoPost PHP 5.0 RC3 allows remote attackers to execute arbitrary …

Published Mar 20, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in member.php and possibly other scripts in PhotoPost PHP 5.0 RC3 allows remote attackers to execute arbitrary SQL commands via the uid parameter.

References

12779 vdb-entry
20050311 PhotoPost PHP 5.0 RC3, and later, multiple vulnerabilities mailing-list
photopost-uid-sql-injection(19675) vdb-entry
14576 third-party-advisory