CVE-2008-4912

The CVE-2008-4912 entry describes an SQL injection in the RS MAXSOFT fotogalerie module, specifically in popup_img.php where the vulnerable input is the fotoID parameter . The underlying issue allows remote attackers to execute arbitrary SQL commands via that parameter. Affected component is the ...

Sql injection

SQL injection vulnerability in popupimg.php in the fotogalerie module in RS MAXSOFT allows remote attackers to execute arbitrary SQL commands via the fotoID parameter. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect...