Description
SQL injection vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to queries. NOTE: this might be the same issue as CVE-2008-4338.
References
- 32106 third-party-advisory
- brilliantgallery-unspecified-sql-injection(45637) vdb-entry
- http://drupal.org/node/315919
- 31554 vdb-entry