CVE-2008-3788 | BDVDB-2026-32138 Detail

Description#

Multiple SQL injection vulnerabilities in PICTURESPRO Photo Cart 3.9, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) qtitle, (2) qid, and (3) qyear parameters to (a) search.php, and the (4) email and (5) password parameters to (b) _login.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securityreason.com/securityalert/4188
https://www.exploit-db.com/exploits/6285
https://exchange.xforce.ibmcloud.com/vulnerabilities/44607
http://www.securityfocus.com/bid/30786
http://packetstormsecurity.org/0808-exploits/photocart-sql.txt

Exploit#

https://www.exploit-db.com/exploits/6285

History#

Version 12008-08-26Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.