Unrated severityNVD Advisory· Published Aug 26, 2008· Updated Apr 23, 2026
CVE-2008-3788
CVE-2008-3788
Description
Multiple SQL injection vulnerabilities in PICTURESPRO Photo Cart 3.9, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) qtitle, (2) qid, and (3) qyear parameters to (a) search.php, and the (4) email and (5) password parameters to (b) _login.php.
Affected products
1- cpe:2.3:a:picturespro:picturespro_photo_cart:3.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5News mentions
0No linked articles in our index yet.