CVE-2009-1650 - Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) albumID, (2) tagID, and (3) photoID parameters to index.html

Back Back to CVE browser

HIGH

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) albumID, (2) tagID, and (3) photoID parameters to index.html

Published May 16, 2009

7.5

HIGH

CVSS 2.0

EPSS 0.99%

Description

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) albumID, (2) tagID, and (3) photoID parameters to index.html.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (4)

http://secunia.com/advisories/35049
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/archive/1/503493
mailing-listx_refsource_BUGTRAQExploit
http://www.securityfocus.com/bid/34967
vdb-entryx_refsource_BIDExploit
https://www.exploit-db.com/exploits/8679
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://secunia.com/advisories/35049		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/archive/1/503493		mailing-listx_refsource_BUGTRAQExploit
http://www.securityfocus.com/bid/34967		vdb-entryx_refsource_BIDExploit
https://www.exploit-db.com/exploits/8679		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 16, 2009

Updated Aug 7, 2024

Reserved May 16, 2009

Link CVE-2009-1650

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-1650

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-1650