CVE-2012-5304 in YVS Image Gallery
Résumé (Anglaise)
Static code injection vulnerability in administration/install.php in YVS Image Gallery allows remote attackers to inject arbitrary PHP code into functions/db_connect.php via unspecified vectors. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product s installation documentation.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Réserver
06/10/2012
Divulgation
06/10/2012
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 62577 | Yuriy V Semenikhin YVS Image Gallery Administration élévation de privilèges | 94 | Non défini | Non défini | CVE-2012-5304 |