← Database

CVE-2008-5037

HIGH CVSS: 7.5 Published: 2008-11-12 Modified: 2026-06-16

Description

SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter.

Affected Platforms

Elkagroup Image Gallery

Weakness Type

CWE-89

References