CVE-2012-2338

SQL injection vulnerability in includes/picture.class.php in Galette 0.63, 0.63.1, 0.63.2, 0.63.3, and 0.64rc1 allows remote attackers to execute arbitrary SQL commands via the id_adh parameter to picture.php.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.23% chance of exploitation in the next 30 days, 82th percentile

Published

2012-05-21

Updated

2024-09-16

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/18875

References

• CVE Record
• NVD entry

Related

• CVE-2012-2336
• CVE-2012-2371
• CVE-2012-2332
• CVE-2012-2376
• CVE-2012-2331
• CVE-2012-2385