CVE-2008-4778

EPSS 1.1%

SQL injection vulnerability in the gallery module in Koobi CMS 4.3.0 allows remote attackers to execute arbitrary SQL commands via the galid parameter in a showimages action.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/5447unverified cve_referencewww.exploit-db.com/exploits/5414unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://securityreason.com/securityalert/4525 https://exchange.xforce.ibmcloud.com/vulnerabilities/46254 https://www.exploit-db.com/exploits/5414 https://www.exploit-db.com/exploits/5447 http://www.securityfocus.com/archive/1/490886/100/0/threaded