SQL Injection in Selbstzweck Rgallery Plugin
CVE-2009-2311
SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows remote attackers to execute arbitrary SQL commands via the userID parameter in the RGalleryUserGallery page to index.php, a different vector than CVE-2008-4627.
Vulnerability class: SQL Injection
EPSS: 0.010 (57.9th percentile) — read the EPSS interpretation.
Affected products
- Selbstzweck Rgallery_plugin — versions 1.2.3
- Woltlab Burning_board
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)