Lucene search
HistoryDec 17, 2008 - 5:30 p.m.
CVE-2008-5641
cve-2008-5641
sql injection
active photo gallery 6.2
vulnerability
nvd
8.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
43.6%
SQL injection vulnerability in account.asp in Active Photo Gallery 6.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
Affected configurations
Node
activewebsoftwaresactive_photo_galleryMatch6.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| activewebsoftwares:active_photo_gallery | activewebsoftwares active photo gallery | eq | 6.2 |
Related
exploitdb
exploitdb
Active Photo Gallery 6.2 - Auth Bypass Remote SQL Injection
2009-12-17 00:00:00
cvelist
cvelist
CVE-2008-5641
2008-12-17 17:00:00
prion
prion
Sql injection
2008-12-17 17:30:00
nvd
nvd
CVE-2008-5641
2008-12-17 17:30:00
8.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
43.6%
Related for CVE-2008-5641