CVE-2008-1875 SQL injection vulnerability in index.php in Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 allows remote attackers to execute arbitrary SQL commands via the photo_id parameter.
HighCVSS 7.5
EPSS 0.97%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in index.php in Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 allows remote attackers to execute arbitrary SQL commands via the photo_id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| terong advanced web photo gallery | = 1.0 | No fix listed |
References
- 29667 third-party-advisory vendor-advisory
- 28626 exploit vdb-entry
- photogallery-index-sql-injection(41665) vdb-entry
- 5364 exploit