← Database

CVE-2008-6249

HIGH CVSS: 7.5 Published: 2009-02-23 Modified: 2026-06-16

Description

SQL injection vulnerability in plugins/users/index.php in Galatolo WebManager 1.3a and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected Platforms

Gwm Galatolo Webmanager

Weakness Type

CWE-89

References