CVE-2008-4627

2008-10-2100:00:00

mitre

www.cve.org

8.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.5%

JSON

SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows remote attackers to execute arbitrary SQL commands via the itemID parameter in the RGalleryImageWrapper page in index.php.

References

secunia.com/advisories/32323

securityreason.com/securityalert/4443

www.securityfocus.com/bid/31820

exchange.xforce.ibmcloud.com/vulnerabilities/45966

www.exploit-db.com/exploits/6790