VYPR

Opial

by Shalwan

CVEs (2)

  • CVE-2009-2388Jul 9, 2009
    risk 0.03cvss epss 0.01

    SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtPassword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

  • CVE-2009-2341Jul 7, 2009
    risk 0.03cvss epss 0.01

    SQL injection vulnerability in albumdetail.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the albumid parameter.