CVE-2008-5641 SQL injection vulnerability in account.asp in Active Photo Gallery 6.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
HighCVSS 7.5
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in account.asp in Active Photo Gallery 6.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| activewebsoftwares active photo gallery | = 6.2 | No fix listed |
References
- 32901 third-party-advisory vendor-advisory
- 4767 third-party-advisory
- ADV-2008-3297 vdb-entry
- 7299 exploit