NVD

Id
44151  
Name
CVE-2012-2338  
Description
SQL injection vulnerability in includes/picture.class.php in Galette 0.63, 0.63.1, 0.63.2, 0.63.3, and 0.64rc1 allows remote attackers to execute arbitrary SQL commands via the id_adh parameter to picture.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-05-21  
Modified Date
2012-05-22  
Seq
2012-2338  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221795 44151 CVE-2012-2338 http://redmine.ulysses.fr/issues/250  View
221796 44151 CVE-2012-2338 http://redmine.ulysses.fr/projects/galette/repository/revisions/8c13ec159ba  View
221797 44151 CVE-2012-2338 [oss-security] 20120510 CVE-request: galette sql injection  View
221798 44151 CVE-2012-2338 [oss-security] 20120510 Re: CVE-request: galette sql injection  View
221799 44151 CVE-2012-2338 53463  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26784 JVNDB-2012-002491 Galette の includes/picture.class.php における SQL インジェクションの脆弱性 Galette の includes/picture.class.php には、SQL インジェクションの脆弱性が存在します。 CVE-2012-2338 55576 CVE-2012-2338 44151 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002491.html 2012-05-21 2012-05-23 View