PT-2012-3960 · Galette · Galette

Johan Cwiklinski · Published 2012-05-21 · Updated 2012-05-22 · CVE-2012-2338

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Galette versions 0.63 through 0.63.3 Galette version 0.64rc1

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id adh parameter to "picture.php".

Recommendations For Galette versions 0.63 through 0.63.3, and version 0.64rc1, avoid using the id adh parameter in the "picture.php" endpoint until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2012-2338

Affected Products

Galette

References · 7

• 🔥 https://exploit-db.com/exploits/18875 · Exploit
• 🔥 http://redmine.ulysses.fr/issues/250 · Exploit
• 🔥 http://securityfocus.com/bid/53463 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-2338 · Security Note
• http://redmine.ulysses.fr/projects/galette/repository/revisions/8c13ec159ba · Note
• http://openwall.com/lists/oss-security/2012/05/11/1 · Note
• http://openwall.com/lists/oss-security/2012/05/10/5 · Note