CVEvulnerability
CVE-2008-4627
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-10-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows remote attackers to execute arbitrary SQL commands via the itemID parameter in the RGalleryImageWrapper page in index.php.
Affected configurations
• rgallery rgallery plugin 1.09
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/32323 Vendor Advisory
- http://securityreason.com/securityalert/4443 securityreason.com
- http://www.securityfocus.com/bid/31820 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45966 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6790 www.exploit-db.com
- http://secunia.com/advisories/32323 Vendor Advisory
- http://securityreason.com/securityalert/4443 securityreason.com
- http://www.securityfocus.com/bid/31820 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45966 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6790 www.exploit-db.com