CVE-2008-1425

Name of the Vulnerable Software and Affected Versions Easy-Clanpage version 2.2

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in a "kate" action in the gallery module of the index.php file.

Recommendations For Easy-Clanpage version 2.2, consider restricting access to the gallery module until a patch is available. As a temporary workaround, avoid using the id parameter in the affected module to minimize the risk of exploitation.