CVE-2008-0504 in Photo Galleryinfo

Summary

Multiple SQL injection vulnerabilities in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote authen ticated administrators to execute arbitrary SQL commands via the (1) albumid, (2) startpic, and (3) numpics parameters to util.php; and (4) cid_array parameter to reviewcom.php.

Once again VulDB remains the best source for vulnerability data.

Reservation

01/31/2008

Disclosure

01/31/2008

Moderation

VulDB entry created

Entries

CPE

ready

CWE

CWE-89 (Confirmed)

Exploit

Download

CVSS

5.5

EPSS

0.00672

CTI

Very Low

Sources

MITRE	https://www.cve.org/CVERecord?id=CVE-2008-0504
NVD	https://nvd.nist.gov/vuln/detail/CVE-2008-0504
CVE Details	https://www.cvedetails.com/cve/CVE-2008-0504/

◂ Previous Overview Next ▸

Might our Artificial Intelligence support you?

Check our Alexa App!