CVE-2009-2311 - SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows remote attackers to execute arbitrary SQL commands via the userID parameter in the RGalleryUserGallery page to index.php, a different vector than CVE-2008-4627

Back Back to CVE browser

HIGH

SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows remote attackers to execute arbitrary SQL commands via the userID parameter in the RGalleryUserGallery page to index.php, a different vector than CVE-2008-4627

Published Jul 2, 2009

7.5

HIGH

CVSS 2.0

EPSS 0.96%

Description

SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows remote attackers to execute arbitrary SQL commands via the userID parameter in the RGalleryUserGallery page to index.php, a different vector than CVE-2008-4627.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

http://www.exploit-db.com/exploits/8254
exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/34194
vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/49351
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.exploit-db.com/exploits/8254		exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/34194		vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/49351		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 2, 2009

Updated Aug 7, 2024

Reserved Jul 2, 2009

Link CVE-2009-2311

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-2311

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-2311