CVE-2009-2311
rGallery 1.2.3 - SQL Injection
Title source: llmDescription
SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows remote attackers to execute arbitrary SQL commands via the userID parameter in the RGalleryUserGallery page to index.php, a different vector than CVE-2008-4627.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Invisibility · perlwebappsphp
https://www.exploit-db.com/exploits/8254
Scores
EPSS
0.0028
EPSS Percentile
51.0%
Details
CWE
CWE-89
Status
published
Products (1)
selbstzweck/rgallery_plugin
1.2.3
Published
Jul 02, 2009
Tracked Since
Feb 18, 2026