CVE-2008-7038: SQL Injection
Published Aug 24, 2009
·Updated
SQL injection vulnerability in the MyeGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgall action to modules.php. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect.
Affected Software
2 affected components
Phpnuke Php-nuke
MAXdev My Egallery
Event History
Aug 24, 2009
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
10:30 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-7038?
CVE-2008-7038 is classified as a high-severity SQL injection vulnerability.
2
How do I fix CVE-2008-7038?
To fix CVE-2008-7038, validate and sanitize all user inputs related to the gid parameter in the showgall action.
3
Who is affected by CVE-2008-7038?
CVE-2008-7038 affects users of the My_eGallery module for PHP-Nuke.
4
What types of attacks can exploit CVE-2008-7038?
CVE-2008-7038 can be exploited to execute arbitrary SQL commands on the affected database.
5
How can I detect if my site is vulnerable to CVE-2008-7038?
To detect CVE-2008-7038 vulnerabilities, test the gid parameter for SQL injection using specialized security scanning tools.