CVE-2008-6648 - SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter to about_us.php

Back Back to CVE browser

HIGH

SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter to about_us.php

Published Apr 7, 2009

7.5

HIGH

CVSS 2.0

EPSS 1.01%

Description

SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter to about_us.php. NOTE: this might be the same issue as CVE-2008-6647.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (5)

http://osvdb.org/45141
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/30194
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/29136
vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/42317
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/5582
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://osvdb.org/45141		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/30194		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/29136		vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/42317		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/5582		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 7, 2009

Updated Aug 7, 2024

Reserved Apr 6, 2009

Link CVE-2008-6648

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2008-6648

Red Hat

Severity n/a

Public date n/a

Links CVE-2008-6648