CVE-2008-7038 SQL injection vulnerability in the My_eGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgall action to modules.php. NOTE: this issue...
HighCVSS 7.5
EPSS 1.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in the My_eGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgall action to modules.php. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| maxdev my egallery | All versions | No fix listed |
References
- 51021 exploit vdb-entry
- 20080228 PHP-Nuke My_eGallery "gid" Remote SQL Injection mailing-list
- 28030 exploit vdb-entry
- myegallery-gid-sql-injection(40910) vdb-entry
- 5203 exploit
- 5242 exploit