CVE-2008-6788 SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to inde...
MediumCVSS 5.1
EPSS 0.92%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| minddezign photo gallery | = 2.2 | No fix listed |
References
- 49266 exploit vdb-entry
- 32358 third-party-advisory vendor-advisory
- 31893 exploit vdb-entry
- photogallery-id-username-sql-injection(46075) vdb-entry
- 6819 exploit