VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 25, 2010· Updated Jun 16, 2026

CVE-2009-4979

CVE-2009-4979

Description

Multiple SQL injection vulnerabilities in search.php in Photokorn Gallery 1.81 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) where[], (2) sort, (3) order, and (4) Match parameters.

Affected products

2
  • Keil Software/Gallery2 versions
    cpe:2.3:a:keil-software:photokorn_gallery:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:keil-software:photokorn_gallery:*:*:*:*:*:*:*:*range: <=1.81
    • (no CPE)range: <=1.81

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.