high7.5
CVE-2008-2765
SQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows remote attackers to execute arbitrary SQL commands via the categoryid para…
Impact
SQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xigla | Absolute Image Gallery Xe | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://bugreport.ir/index.php?/41
- http://marc.info/?l=bugtraq&m=121322052622903&w=2
- http://securityreason.com/securityalert/3950
- http://www.securityfocus.com/bid/29672
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43052
- http://bugreport.ir/index.php?/41
- http://marc.info/?l=bugtraq&m=121322052622903&w=2
- http://securityreason.com/securityalert/3950
- http://www.securityfocus.com/bid/29672
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43052