CVE-2008-6647 - CVE House
Back to Database
Status published High CVE-2008-6647

SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows...

Vulnerability Description

SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to execute arbitrary SQL commands via the gid parameter.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-6647

Credits & Attribution

No credits recorded in the NVD database.

References

More from ktools

View All →
CVE-2016-4337
SQL injection vulnerability in the mgr.login.php file in Ktools.net Photostore...
Critical 9.8
CVE-2008-6649
SQL injection vulnerability in manager/image_details_editor.php in Ktools PhotoStore 2.5, 2.9.8,...
High 7.5
CVE-2008-6648
SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and...
High 7.5
CVE-2005-3863
Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and...
High 7.5

Affected Vendor

Affected Software

photostore
Vulnerable Versions:
3.4.3

Timeline

Official Publish: April 7th, 2009
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.