Skip to content

CVE-2008-4738 SQL injection vulnerability in gallery.php in MyCard 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.

HighCVSS 7.5 EPSS 1.0% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in gallery.php in MyCard 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

ProductAffected versionsFixed in
tufat mycard = 1.0.2 No fix listed

References

  • 32039 third-party-advisory vendor-advisory
  • 4476 third-party-advisory
  • 31447 vdb-entry
  • 6603 exploit