CVE-2012-2338

State: Published
Severity: Not scored
Published: May 21, 2012
Updated: Sep 16, 2024
Reserved: Apr 19, 2012

Description

SQL injection vulnerability in includes/picture.class.php in Galette 0.63, 0.63.1, 0.63.2, 0.63.3, and 0.64rc1 allows remote attackers to execute arbitrary SQL commands via the id_adh parameter to picture.php.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

[oss-security] 20120510 Re: CVE-request: galette sql injectionmailing-list
53463vdb-entry
[oss-security] 20120510 CVE-request: galette sql injectionmailing-list
http://redmine.ulysses.fr/issues/250
http://redmine.ulysses.fr/projects/galette/repository/revisions/8c13ec159ba

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.