SQL injection vulnerability in search.php in 4images 1.7.x allows remote authenticated users to execute arbitrary SQL commands via the search_user parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| 4images | 4homepages | 1.7.1 (including) | 1.7.1 (including) |
| 4images | 4homepages | 1.7.3 (including) | 1.7.3 (including) |