CVE-2008-2817 in NiTrO Web Gallery

Riassunto

di MITRE

SQL injection vulnerability in albums.php in NiTrO Web Gallery 1.4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the CatId parameter in a show action.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 23/06/2008
• Divulgazione: 23/06/2008
• Moderazione: accettato
• Voce: VDB-42866
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.5 (NVD)
• EPSS: 0.00967
• KEV: no
• Attività: molto basso
• Settore: Agriculture, Lawfirm, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-2817
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-2817
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-2817/