Shutter (Tenfourzero) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2014-08-17. Vendor: Tenfourzero.

CVEs of Shutter

• CVE-2014-3905 - CVSS 4.3 (medium), 2014-08-17: Cross-site scripting (XSS) vulnerability in tenfourzero Shutter 0.1.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
• CVE-2014-3904 - CVSS 7.5 (high), 2014-08-17: SQL injection vulnerability in lib/admin.php in tenfourzero Shutter 0.1.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
• CVE-2009-1650 - CVSS 7.5 (high), 2009-05-16: Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) albumID, (2) tagID,…