high7.5Public exploit code
CVE-2008-7038
SQL injection vulnerability in the My_eGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgal…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- XOOPS Module My_eGallery 3.04 - 'gid' SQL Injection2008-03-12 · webapps · php · Verified
- PHP-Nuke Module My_eGallery 2.7.9 - SQL Injection2008-02-28 · webapps · php · Verified
Impact
SQL injection vulnerability in the My_eGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgall action to modules.php. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Maxdev | My Egallery | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/51021
- http://www.securityfocus.com/archive/1/488916/100/100/threaded
- http://www.securityfocus.com/bid/28030
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40910
- https://www.exploit-db.com/exploits/5203
- https://www.exploit-db.com/exploits/5242
- http://osvdb.org/51021
- http://www.securityfocus.com/archive/1/488916/100/100/threaded
- http://www.securityfocus.com/bid/28030
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40910
- https://www.exploit-db.com/exploits/5203
- https://www.exploit-db.com/exploits/5242