high7.5Public exploit code
CVE-2008-4627
SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows remote attackers to execute arbitrary SQL commands via the itemI…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WBB Plugin rGallery 1.09 - 'itemID' Blind SQL Injection2008-10-20 · webapps · php · Verified
Impact
SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows remote attackers to execute arbitrary SQL commands via the itemID parameter in the RGalleryImageWrapper page in index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rgallery | Rgallery Plugin | Version 1.09 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/32323
- http://securityreason.com/securityalert/4443
- http://www.securityfocus.com/bid/31820
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45966
- https://www.exploit-db.com/exploits/6790
- http://secunia.com/advisories/32323
- http://securityreason.com/securityalert/4443
- http://www.securityfocus.com/bid/31820
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45966
- https://www.exploit-db.com/exploits/6790