| Max CVSS | 7.5 | Min CVSS | 6.4 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-4925 | 7.5 |
Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow remote attackers to execute arbitrary SQL commands via the u parameter in a (1) app0 or (2) app1 action. NOTE: the provenance of this information is unknown; the
|
29-08-2017 - 01:32 | 15-09-2012 - 17:55 | |
| CVE-2012-4926 | 6.4 |
approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the activation of administrators via the u parameter in an (1) app0 (disable) or (2) app1 (enable) action.
|
18-09-2012 - 04:00 | 15-09-2012 - 17:55 |