CVE-2009-2311: SQL Injection

Published Jul 2, 2009

Updated

SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows remote attackers to execute arbitrary SQL commands via the userID parameter in the RGalleryUserGallery page to index.php, a different vector than CVE-2008-4627.

Affected Software

2 affected components

Selbstzweck Rgallery Plugin=1.2.3

Woltlab Burning Board

Event History

Jul 2, 2009

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Data Sourced

10:30 AM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-2311?

CVE-2009-2311 is considered a critical vulnerability due to the potential for remote attackers to execute arbitrary SQL commands.

How do I fix CVE-2009-2311?

To fix CVE-2009-2311, upgrade the rGallery plugin from version 1.2.3 to a patched version that resolves the SQL injection issue.

What systems are affected by CVE-2009-2311?

CVE-2009-2311 affects the rGallery plugin version 1.2.3 for WoltLab Burning Board (WBB3).

What type of vulnerability is CVE-2009-2311?

CVE-2009-2311 is an SQL injection vulnerability that allows attackers to manipulate database queries.

Are there any known exploits for CVE-2009-2311?

Yes, there are known exploits for CVE-2009-2311 that can be used to demonstrate the SQL injection attack vectors.