Skip to content

CVE-2008-6466 SQL injection vulnerability in image_gallery.php in the Akira Powered Image Gallery (image_gallery) plugin 0.9.6.2 for e107 allows remote attackers to execute arbitrary SQL commands via the image para...

HighCVSS 7.5 EPSS 0.97%
Published
Updated
Exploit status
No public exploit known

Description

SQL injection vulnerability in image_gallery.php in the Akira Powered Image Gallery (image_gallery) plugin 0.9.6.2 for e107 allows remote attackers to execute arbitrary SQL commands via the image parameter in an image-detail action.

Affected products

ProductAffected versionsFixed in
akirapowered image gallery = 0.9.6.2 No fix listed

References

  • 34384 third-party-advisory vendor-advisory
  • 31286 exploit vdb-entry
  • 6516 exploit