CVE-2008-4912 SQL injection vulnerability in popup_img.php in the fotogalerie module in RS MAXSOFT allows remote attackers to execute arbitrary SQL commands via the fotoID parameter. NOTE: this issue was disclosed....
HighCVSS 7.5
EPSS 0.97%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in popup_img.php in the fotogalerie module in RS MAXSOFT allows remote attackers to execute arbitrary SQL commands via the fotoID parameter. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rs maxsoft fotogalerie | All versions | No fix listed |
References
- 4547 third-party-advisory
- 28735 exploit vdb-entry
- rsmaxsoft-popupimg-sql-injection(41798) vdb-entry
- 5426 exploit