CVE-2008-6348

no score yetEPSS 1.0%

Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter to gallery_category.php, (2) photo_id parameter to gallery_photo.php, and the (3) user_name and (4) user_pass parameters to admin/index.php. NOTE: some of these details are obtained from third party information.

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2009-03-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

developiteasy:photo_gallery

References

http://secunia.com/advisories/32593
http://www.securityfocus.com/bid/32145
https://exchange.xforce.ibmcloud.com/vulnerabilities/46400
https://www.exploit-db.com/exploits/7016
http://secunia.com/advisories/32593

Check your stack JSON