CVE-2012-2338
published 2012-05-21CVE-2012-2338: SQL injection vulnerability in includes/picture.class.php in Galette 0.63, 0.63.1, 0.63.2, 0.63.3, and 0.64rc1 allows remote attackers to execute arbitrary SQL…
PriorityP348high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
2.23%
80.6th percentile
SQL injection vulnerability in includes/picture.class.php in Galette 0.63, 0.63.1, 0.63.2, 0.63.3, and 0.64rc1 allows remote attackers to execute arbitrary SQL commands via the id_adh parameter to picture.php.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| johan_cwiklinski | galette | — | — |
| johan_cwiklinski | galette | — | — |
| johan_cwiklinski | galette | — | — |
| johan_cwiklinski | galette | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://redmine.ulysses.fr/issues/250http://redmine.ulysses.fr/projects/galette/repository/revisions/8c13ec159bahttp://www.openwall.com/lists/oss-security/2012/05/10/5http://www.openwall.com/lists/oss-security/2012/05/11/1http://www.securityfocus.com/bid/53463http://redmine.ulysses.fr/issues/250http://redmine.ulysses.fr/projects/galette/repository/revisions/8c13ec159bahttp://www.openwall.com/lists/oss-security/2012/05/10/5http://www.openwall.com/lists/oss-security/2012/05/11/1http://www.securityfocus.com/bid/53463
2012-05-21
Published