CVE-2008-1349

critical

Description

SQL injection vulnerability in viewcat.php in the bamaGalerie (Bama Galerie) 3.03 and 3.041 module for eXV2 2.0.6 allows remote attackers to execute arbitrary SQL commands via the cid parameter.

References

https://www.exploit-db.com/exploits/5340

https://www.exploit-db.com/exploits/5244

https://exchange.xforce.ibmcloud.com/vulnerabilities/41188

http://www.securityfocus.com/bid/28229

http://secunia.com/advisories/29362

http://secunia.com/advisories/29359

http://packetstormsecurity.org/0804-exploits/runcms11a-sql.txt

Details

Source: Mitre, NVD

Published: 2008-03-17

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.0064

Detections

Analytics