← Database

CVE-2008-2536

HIGH CVSS: 7.5 Published: 2008-06-03 Modified: 2026-06-16

Description

SQL injection vulnerability in out.php in YABSoft Advanced Image Hosting (AIH) Script 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the t parameter.

Affected Platforms

Yabsoft Advanced Image Hosting Script

Weakness Type

CWE-89

References