← Database

CVE-2010-2624

HIGH CVSS: 7.5 Published: 2010-07-02 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in iScripts EasySnaps 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) comment parameter to add_comments.php, (2) values parameter to tags_details.php, or (3) begin parameter to greetings.php.

Affected Platforms

Iscripts Easysnaps

Weakness Type

CWE-89

References