CVE-2008-1349

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.23%

Published

Mar 17, 2008

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

TrickestTrickest PoC index Exploit-DBeXV2 Module bamaGalerie 3.03 - SQL Injection

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SQL injection vulnerability in viewcat.php in the bamaGalerie (Bama Galerie) 3.03 and 3.041 module for eXV2 2.0.6 allows remote attackers to execute arbitrary SQL commands via the cid parameter.

Weaknesses (CWE)

CWE-89

Affected Products (3)

exv2 · bamagalerievulnerable

exv2 · exv2vulnerable

References (14)

http://packetstormsecurity.org/0804-exploits/runcms11a-sql.txt

http://secunia.com/advisories/29359

Vendor Advisory

http://secunia.com/advisories/29362

Vendor Advisory

http://www.securityfocus.com/bid/28229

https://exchange.xforce.ibmcloud.com/vulnerabilities/41188

https://www.exploit-db.com/exploits/5244

https://www.exploit-db.com/exploits/5340

http://packetstormsecurity.org/0804-exploits/runcms11a-sql.txt

http://secunia.com/advisories/29359

Vendor Advisory

http://secunia.com/advisories/29362

Vendor Advisory

http://www.securityfocus.com/bid/28229

https://exchange.xforce.ibmcloud.com/vulnerabilities/41188

https://www.exploit-db.com/exploits/5244

https://www.exploit-db.com/exploits/5340

KEV Catalog EPSS Scores Vendors All CVEs