SQL injection vulnerability in out.php in YABSoft Advanced Image Hosting (AIH) Script 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the t parameter.
Search vulnerabilities
CVE-2008-2536
CVSS 2.0 · 7.5 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2009-1032
SQL injection vulnerability in gallery_list.php in YABSoft Advanced Image Hosting (AIH) Script 2.3 allows remote attackers to execute arbitrary SQL commands via the gal parameter.
CVSS 2.0 · 7.5 High
EPSS 1.0%
KEV · Not listed
Vendors
Products
CVE-2009-4266
Cross-site scripting (XSS) vulnerability in search.php in YABSoft Advanced Image Hosting (AIH) Script 2.2, and possibly 2.3, allows remote attackers to inject arbitrary web script or HTML via the text parameter.
CVSS 2.0 · 4.3 Medium
EPSS 1.4%
KEV · Not listed
Vendors
Products
CVE-2012-6039
SQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script, possibly 2.3, allows remote attackers to execute arbitrary SQL commands via the gal parameter.
CVSS 2.0 · 7.5 High
EPSS 1.1%
KEV · Not listed
Vendors
Products
Page 1 of 1.