CVE-2008-6648: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter to aboutus.php. NOTE: this might be the same issue as CVE-2008-6647...

Ktools Photostore 3.5.2 - Multiple SQL Injections

Ktools Photostore 3.5.2 - Multiple SQL Injections '/ -.- -------------------------oOO------OOo------------------------- | Ktools Photostore = v3.5.2 crumbs.php Remote SQL Injection | | works only with magic quotes = off | | coded by DNX |...