Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 19/05/2008 Updated: 29/09/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in IMGallery 2.5, when magic_quotes_gpc is disabled, allow remote malicious users to execute arbitrary SQL commands via the (1) kategoria parameter to (a) galeria.php and the (2) id_phot parameter to (b) popup/koment.php and (c) popup/opis.php in, different vectors than CVE-2006-3163.

Vulnerable Product	Search on Vulmon	Subscribe to Product
imgallery imgallery 2.5

Name : IMGallery 25 Multiply Remote SQL Injection Vulnerabilities Author : cOndemned Conditions : magic_quotes_gpc = off ;/ Greetz : irk4z, GregStar, ZaBeaTy, d3d!k, #CodersWorld, #gathering and Avantura ;*** [attacked_box]/[imgallery]/galeriaphp?start=0&kategoria='+union+select+haslo,2,3+from+imgallery_hasla/* [ ...

CWE-89 http://www.securityfocus.com/bid/29250 https://exchange.xforce.ibmcloud.com/vulnerabilities/42474 https://www.exploit-db.com/exploits/5631 https://nvd.nist.gov https://www.exploit-db.com/exploits/5631/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-2337

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect