CVE-2008-6466

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-03-13 · updated 2026-06-16
Weakness: CWE-89

Description

SQL injection vulnerability in image_gallery.php in the Akira Powered Image Gallery (image_gallery) plugin 0.9.6.2 for e107 allows remote attackers to execute arbitrary SQL commands via the image parameter in an image-detail action.

Affected products

Akirapowered Image Gallery: 0.9.6.2

References

http://secunia.com/advisories/34384
http://www.securityfocus.com/bid/31286
https://www.exploit-db.com/exploits/6516
http://secunia.com/advisories/34384
http://www.securityfocus.com/bid/31286
https://www.exploit-db.com/exploits/6516

Get alerted when CVE-2008-6466 or the next vulnerability affects your stack