CVE-2008-1349

2008-03-1716:00:00

mitre

www.cve.org

AI Score

8.4

Confidence

Low

EPSS

0.108

Percentile

95.2%

JSON

SQL injection vulnerability in viewcat.php in the bamaGalerie (Bama Galerie) 3.03 and 3.041 module for eXV2 2.0.6 allows remote attackers to execute arbitrary SQL commands via the cid parameter.

References

packetstormsecurity.org/0804-exploits/runcms11a-sql.txt

secunia.com/advisories/29359

secunia.com/advisories/29362

www.securityfocus.com/bid/28229

exchange.xforce.ibmcloud.com/vulnerabilities/41188

www.exploit-db.com/exploits/5244

www.exploit-db.com/exploits/5340