What’s Vulnerable › Vulnerabilities

CVE-2008-1349

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2008-03-17 · updated 2026-06-16
• Weakness: CWE-89

Description

SQL injection vulnerability in viewcat.php in the bamaGalerie (Bama Galerie) 3.03 and 3.041 module for eXV2 2.0.6 allows remote attackers to execute arbitrary SQL commands via the cid parameter.

Affected products

• Exv2 Bamagalerie: 3.03, 3.041
• Exv2: 2.0.6

References

• http://packetstormsecurity.org/0804-exploits/runcms11a-sql.txt
• http://secunia.com/advisories/29359
• http://secunia.com/advisories/29362
• http://www.securityfocus.com/bid/28229
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41188
• https://www.exploit-db.com/exploits/5244
• https://www.exploit-db.com/exploits/5340
• http://packetstormsecurity.org/0804-exploits/runcms11a-sql.txt
• http://secunia.com/advisories/29359
• http://secunia.com/advisories/29362
• http://www.securityfocus.com/bid/28229
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41188

Get alerted when CVE-2008-1349 or the next vulnerability affects your stack