CVE-2008-6197

CVE-2008-6197 describes a SQL injection vulnerability in the galerie module of KwsPHP 1.3.456, specifically in the index.php script. The flaw allows remote attackers to inject arbitrary SQL via the id_gal parameter used in a gal action. The NVD record lists a high base score (7.5, CVSS2) with net...