← Back

Vacilanda

vacilanda

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Brilliant Gallery
brilliant_gallery
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-4338
1Vacilanda
1Brilliant Gallery
Apr 23, 2026
Sep 30, 2008
N/A· v4
N/A· v3
6.0 MEDIUM· v2
SQL injection vulnerability in the brilliant_gallery_checklist_save function in the bgchecklist/save script in Brilliant Gallery 5.x and 6.x, a module for Drupal, allows remote authenticated users with "access brilliant_...Show more
SQL injection vulnerability in the brilliant_gallery_checklist_save function in the bgchecklist/save script in Brilliant Gallery 5.x and 6.x, a module for Drupal, allows remote authenticated users with "access brilliant_gallery" permissions to execute arbitrary SQL commands via the (1) nid, (2) qid, (3) state, and possibly (4) user parameters.Show less