CVE-2008-1464: SQL Injection

Published Mar 24, 2008

Updated

Multiple SQL injection vulnerabilities in Gallarific Free Edition 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) query parameter to (a) search.php; (2) gusername and (3) gpassword parameters to (b) login.php; and the (4) username and (5) password parameters to (c) gadmin/index.php in a signin action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Software

1 affected component

Gallarific Gallarific=1.1

Event History

Mar 24, 2008

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-1464?

CVE-2008-1464 is classified as a high severity vulnerability due to its potential for remote SQL injection attacks.

How do I fix CVE-2008-1464?

To fix CVE-2008-1464, validate and sanitize all user inputs to prevent SQL injection.

Which software versions are affected by CVE-2008-1464?

CVE-2008-1464 affects Gallarific Free Edition version 1.1.

What types of attacks can be executed using CVE-2008-1464?

CVE-2008-1464 allows attackers to execute arbitrary SQL commands, potentially compromising the database.

Where do the vulnerabilities exist in the Gallarific application related to CVE-2008-1464?

The vulnerabilities exist in search.php, login.php, and gadmin scripts via specific input parameters.