CVE-2010-2336

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-06-18 · updated 2026-06-16
Weakness: CWE-200

Description

index.php in Yamamah Photo Gallery 1.00 allows remote attackers to obtain the source code of executable files within the web document root via the download parameter.

Affected products

Yamamah: 1.00

References

http://www.exploit-db.com/exploits/13845
http://www.yamamah.org/home/?page=39
http://www.exploit-db.com/exploits/13845
http://www.yamamah.org/home/?page=39

Get alerted when CVE-2010-2336 or the next vulnerability affects your stack