NVD

Id
909  
Name
CVE-2008-0939  
Description
Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album (WPPA) before 1.1 plugin for WordPress allow remote attackers to execute arbitrary SQL commands via (1) the photo parameter to index.php, used by the wppa_photo_name function; or (2) the album parameter to index.php, used by the wppa_album_name function. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-02-25  
Modified Date
2011-03-07  
Seq
2008-0939  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
5443 909 CVE-2008-0939 http://me.mywebsight.ws/web/wppa/  View
5444 909 CVE-2008-0939 3693  View
5445 909 CVE-2008-0939 http://weblogtoolscollection.com/archives/2008/02/21/photo-album-plugin-vulnerabilities/  View
5446 909 CVE-2008-0939 5135  View
5447 909 CVE-2008-0939 20080216 WordPress album PHOTO SQL Injection  View
5448 909 CVE-2008-0939 27832  View
5449 909 CVE-2008-0939 ADV-2008-0586  View
5450 909 CVE-2008-0939 photoalbum-index-sql-injection(40599)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50201 JVNDB-2008-005511 WordPress 用の WPPA プラグインにおける SQL インジェクションの脆弱性 WordPress 用の WP Photo Album (WPPA) プラグインの wppa.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-0939 31052 CVE-2008-0939 909 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005511.html 2008-02-25 2012-12-20 View