CVE-2008-0256 | BDVDB-2026-28686 Detail

Description#

Multiple SQL injection vulnerabilities in Matteo Binda ASP Photo Gallery 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) Imgbig.asp, (b) thumb.asp, and (c) thumbricerca.asp and the (2) ricerca parameter to (d) thumbricerca.asp.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/28447
https://www.exploit-db.com/exploits/4900
http://www.securityfocus.com/bid/27262
https://exchange.xforce.ibmcloud.com/vulnerabilities/39646

Exploit#

https://www.exploit-db.com/exploits/4900

History#

Version 12008-01-15Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.