CVE-2008-0256

no score yetEPSS 1.0%

Multiple SQL injection vulnerabilities in Matteo Binda ASP Photo Gallery 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) Imgbig.asp, (b) thumb.asp, and (c) thumbricerca.asp and the (2) ricerca parameter to (d) thumbricerca.asp.

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2008-01-15
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

matteo_binda:asp_photo_gallery

References

http://secunia.com/advisories/28447
http://www.securityfocus.com/bid/27262
https://exchange.xforce.ibmcloud.com/vulnerabilities/39646
https://www.exploit-db.com/exploits/4900
http://secunia.com/advisories/28447

Check your stack JSON