CVE-2016-4337

Critical

Published: 12/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in the mgr.login.php file in Ktools.net Photostore before version 4.7.5 allows remote attackers to execute arbitrary SQL commands via the email parameter in a recover_login action.

Risk Assessment

An attacker could gain access to sensitive data in the database, potentially leading to serious security breaches for the organization.

Recommendation

It is recommended to update Ktools.net Photostore to version 4.7.5 or later to mitigate this vulnerability.

Original NVD description (English source)

SQL injection vulnerability in the mgr.login.php file in Ktools.net Photostore before 4.7.5 allows remote attackers to execute arbitrary SQL commands via the email parameter in a recover_login action.