CVE-2008-6348

ALTO 7.5CVE-2008-6348 · Published 02/03/2009 · updated 16/06/2026

In breve

CVE-2008-6348 è una vulnerabilità ALTO (CVSS 7.5) che riguarda photo gallery (developiteasy).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.97%, superiore al 62.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
photo gallery developiteasy	`= 1.2`	No fix yet

Description

Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter to gallery_category.php, (2) photo_id parameter to gallery_photo.php, and the (3) user_name and (4) user_pass parameters to admin/index.php. NOTE: some of these details are obtained from third party information.

References

secunia.com/advisories/32593 · Vendor Advisory
securityfocus.com/bid/32145 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/46400
exploit-db.com/exploits/7016

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free