Security Advisory

CVE-2008-6648

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-04-07 10:00:00

Last updated 2024-08-07 11:34:47

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter to about_us.php. NOTE: this might be the same issue as CVE-2008-6647.

← Browse all CVEs View on cve.org ↗