CVE-2008-4912

SQL injection vulnerability in popupimg.php in the fotogalerie module in RS MAXSOFT allows remote attackers to execute arbitrary SQL commands via the fotoID parameter. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect...

CVE-2008-4912

The CVE-2008-4912 entry describes an SQL injection in the RS MAXSOFT fotogalerie module, specifically in popup_img.php where the vulnerable input is the fotoID parameter . The underlying issue allows remote attackers to execute arbitrary SQL commands via that parameter. Affected component is the ...