CVE-2010-2141

no score yetEPSS 2.0%

nitropowered nitro web gallery: no CVSS score yet. EPSS 2.0% chance of exploitation in the next 30 days.

SQL injection vulnerability in index.php in NITRO Web Gallery allows remote attackers to execute arbitrary SQL commands via the PictureId parameter in an open action.

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2010-06-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

nitropowered:nitro_web_gallery

References

http://packetstormsecurity.org/1005-exploits/nitro-sql.txt
http://www.exploit-db.com/exploits/12735
http://www.securityfocus.com/bid/40350
https://exchange.xforce.ibmcloud.com/vulnerabilities/58877
http://packetstormsecurity.org/1005-exploits/nitro-sql.txt

Check your stack JSON