Vulnerability Details CVE-2008-5641
SQL injection vulnerability in account.asp in Active Photo Gallery 6.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.8%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/32901
- http://securityreason.com/securityalert/4767
- http://www.vupen.com/english/advisories/2008/3297
- https://www.exploit-db.com/exploits/7299
- http://secunia.com/advisories/32901
- http://securityreason.com/securityalert/4767
- http://www.vupen.com/english/advisories/2008/3297
- https://www.exploit-db.com/exploits/7299
Products affected by CVE-2008-5641
-
cpe:2.3:a:activewebsoftwares:active_photo_gallery:6.2