Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users' passwords via the (1) photo parameter to addfav.php, (2) photo parameter to comments.php, (3) credit parameter to comments.php, (4) cat parameter to index.php, (5) ppuser parameter to showgallery.php, (6) cat parameter to showgallery.php, (7) cat parameter to uploadphoto.php, (8) albumid parameter to useralbums.php, or (9) albumid parameter to useralbums.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
All Enthusiast Photopost PHP Pro多个输入验证漏洞
Vulnerability Description
PhotoPost PHP Pro 4.6.x以及之前的版本存在多个SQL注入漏洞。远程攻击者借助（1）addfav.php的photo参数，（2）comments.php的photo参数，（3）comments.php的credit参数，（4）index.php的cat漏洞，（5）showgallery.php的ppuser漏洞，（6）showgallery.php的cat参数，（7）uploadphoto.php的cat参数，（8）useralbums.php的albumid参数获得用户的密码。
CVSS Information
N/A
Vulnerability Type
N/A