CVE-2008-4627 SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows remote attackers to execute arbitrary SQL commands via the itemID parameter in the RGalleryImageWrapper p...
HighCVSS 7.5
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows remote attackers to execute arbitrary SQL commands via the itemID parameter in the RGalleryImageWrapper page in index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rgallery plugin | = 1.09 | No fix listed |
References
- 32323 third-party-advisory vendor-advisory
- 4443 third-party-advisory
- 31820 vdb-entry
- rgallery-index-sql-injection(45966) vdb-entry
- 6790 exploit