CVE-2008-1349 SQL injection vulnerability in viewcat.php in the bamaGalerie (Bama Galerie) 3.03 and 3.041 module for eXV2 2.0.6 allows remote attackers to execute arbitrary SQL commands via the cid parameter.
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in viewcat.php in the bamaGalerie (Bama Galerie) 3.03 and 3.041 module for eXV2 2.0.6 allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| exv2 bamagalerie | = 3.03 | No fix listed |
| exv2 bamagalerie | = 3.041 | No fix listed |
| exv2 | = 2.0.6 | No fix listed |
References
- packetstormsecurity.org
- 29359 third-party-advisory vendor-advisory
- 29362 third-party-advisory vendor-advisory
- 28229 vdb-entry
- bamagalerie-viewcat-sql-injection(41188) vdb-entry
- 5244 exploit
- 5340 exploit