Lucene search
MitreCVE-2008-6197HistoryFeb 20, 2009 - 12:30 a.m.
CVE-2008-6197
2009-02-2000:30:00
CWE-89
mitre
web.nvd.nist.gov
27
sql injection
kwsphp
galerie module
vulnerability
remote execution
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.7
Confidence
Low
EPSS
0.001
Percentile
27.8%
SQL injection vulnerability in index.php in the galerie module for KwsPHP 1.3.456 allows remote attackers to execute arbitrary SQL commands via the id_gal parameter in a gal action.
Affected configurations
Node
kwsphpkwsphpMatch1.3.456
kwsphpgalerie_module
| Vendor | Product | Version | CPE |
|---|---|---|---|
| kwsphp | kwsphp | 1.3.456 | cpe:2.3:a:kwsphp:kwsphp:1.3.456:*:*:*:*:*:*:* |
| kwsphp | galerie_module | * | cpe:2.3:a:kwsphp:galerie_module:*:*:*:*:*:*:*:* |
Related
prion
prion
Sql injection
2009-02-20 00:30:00
nvd
nvd
CVE-2008-6197
2009-02-20 00:30:00
cvelist
cvelist
CVE-2008-6197
2009-02-20 00:00:00
exploitdb
exploitdb
KwsPHP 1.3.456 Module Galerie - 'id_gal' SQL Injection
2008-04-03 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.7
Confidence
Low
EPSS
0.001
Percentile
27.8%
Related for CVE-2008-6197