Yabsoft Advanced Image Hosting Script — known CVE vulnerabilities

Every CVE whose affected-product data names Yabsoft Advanced Image Hosting Script, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2008-2536 — CVSS 7.5 (high): SQL injection vulnerability in out.php in YABSoft Advanced Image Hosting (AIH) Script 2.1 and earlier allows remote attackers to execute…
• CVE-2009-1032 — CVSS 7.5 (high): SQL injection vulnerability in gallery_list.php in YABSoft Advanced Image Hosting (AIH) Script 2.3 allows remote attackers to execute…
• CVE-2012-6039 — CVSS 7.5 (high): SQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script, possibly 2.3, allows remote attackers to…
• CVE-2009-4266 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in search.php in YABSoft Advanced Image Hosting (AIH) Script 2.2, and possibly 2.3, allows remote…