CVEvulnerability
CVE-2008-1349
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-03-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in viewcat.php in the bamaGalerie (Bama Galerie) 3.03 and 3.041 module for eXV2 2.0.6 allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Affected configurations
• exv2 bamagalerie 3.03
• exv2 bamagalerie 3.041
• exv2 exv2 2.0.6
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://packetstormsecurity.org/0804-exploits/runcms11a-sql.txt packetstormsecurity.org
- http://secunia.com/advisories/29359 Vendor Advisory
- http://secunia.com/advisories/29362 Vendor Advisory
- http://www.securityfocus.com/bid/28229 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41188 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5244 www.exploit-db.com
- https://www.exploit-db.com/exploits/5340 www.exploit-db.com
- http://packetstormsecurity.org/0804-exploits/runcms11a-sql.txt packetstormsecurity.org
- http://secunia.com/advisories/29359 Vendor Advisory
- http://secunia.com/advisories/29362 Vendor Advisory
- http://www.securityfocus.com/bid/28229 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41188 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5244 www.exploit-db.com
- https://www.exploit-db.com/exploits/5340 www.exploit-db.com