Vulnerability Details CVE-2008-1162
SQL injection vulnerability in album.php in PHP WEB SCRIPT Dynamic Photo Gallery 1.02 allows remote attackers to execute arbitrary SQL commands via the albumID parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.3%
CVSS Severity
CVSS v2 Score 7.5
References
- http://forum.aria-security.net/showthread.php?p=1521
- http://secunia.com/advisories/29212
- http://www.securityfocus.com/archive/1/489017/100/0/threaded
- http://www.securityfocus.com/bid/28067
- https://www.exploit-db.com/exploits/5211
- http://forum.aria-security.net/showthread.php?p=1521
- http://secunia.com/advisories/29212
- http://www.securityfocus.com/archive/1/489017/100/0/threaded
- http://www.securityfocus.com/bid/28067
- https://www.exploit-db.com/exploits/5211
Products affected by CVE-2008-1162
-
cpe:2.3:a:php_web_scripts:dynamic_photo_gallery:1.0.2