← Database

CVE-2009-1032

HIGH CVSS: 7.5 Published: 2009-03-20 Modified: 2026-06-16

Description

SQL injection vulnerability in gallery_list.php in YABSoft Advanced Image Hosting (AIH) Script 2.3 allows remote attackers to execute arbitrary SQL commands via the gal parameter.

Affected Platforms

Yabsoft Advanced Image Hosting Script

Weakness Type

CWE-89

References