CVE-2008-2700

GWM Galatolo Webmanager - SQL Injection

Title source: rule

Description

SQL injection vulnerability in view.php in Galatolo WebManager 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Stack · perlwebappsphp

https://www.exploit-db.com/exploits/5760

View Code ZIP pw:eip

References (3)

[Third Party Advisory, VDB Entry] http://osvdb.org/46443

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/42934

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/5760

Scores

EPSS 0.0041

EPSS Percentile 61.6%

Details

CWE

CWE-89

Status published

Products (1)

gwm/galatolo_webmanager 1.0

Published Jun 13, 2008

Tracked Since Feb 18, 2026