Lucene search
HistoryOct 21, 2008 - 1:18 a.m.
CVE-2008-4627
cve-2008-4627
sql injection
rgallery plugin
woltlab burning board
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.3 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
49.5%
SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows remote attackers to execute arbitrary SQL commands via the itemID parameter in the RGalleryImageWrapper page in index.php.
Affected configurations
Node
rgalleryrgallery_pluginMatch1.09
ORwoltlabwoltlab_burning_board
| CPE | Name | Operator | Version |
|---|---|---|---|
| rgallery:rgallery_plugin | rgallery rgallery plugin | eq | 1.09 |
Related
cvelist
cvelist
CVE-2008-4627
2008-10-21 00:00:00
CVE-2009-2311
2009-07-02 10:00:00
prion
prion
Sql injection
2008-10-21 01:18:00
Sql injection
2009-07-02 10:30:00
nvd
nvd
CVE-2008-4627
2008-10-21 01:18:02
CVE-2009-2311
2009-07-02 10:30:00
cve
cve
CVE-2009-2311
2009-07-02 10:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.3 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
49.5%
Related for CVE-2008-4627