Unscored severity · published Sep 24, 2010
CVE-2010-3601
SQL injection vulnerability in index.php in ibPhotohost 1.1.2 allows remote attackers to execute arbitrary SQL commands via the img parameter
–
CVSS
1%
EPSS
No
On KEV
Description
SQL injection vulnerability in index.php in ibPhotohost 1.1.2 allows remote attackers to execute arbitrary SQL commands via the img parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IB
Ibphotohost · Invisionpower
1.1.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3601
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3601
Exploit
http://packetstormsecurity.org/1009-exploits/ibphotohost-sql.txt
Exploit
http://www.exploit-db.com/exploits/15070
Exploit
http://www.securityfocus.com/bid/43374
Vendor Advisory
http://www.vupen.com/english/advisories/2010/2437