CVE-2008-4912: SQL injection vulnerability in popup_img.php in the fotogalerie module in RS MAXSOFT allows remote attacker...

Security readout for executives and security teams

CVE-2008-4912 is a reported SQL injection in the RS MAXSOFT fotogalerie module. If real and exposed, it could let a remote attacker alter or read database data through the image popup endpoint. The CVE record warns the disclosure came from an unreliable researcher, so treat the finding as unconfirmed until validated in your environment. Exposure is limited to sites running the RS MAXSOFT fotogalerie module with popup_img.php publicly reachable. The supplied CVE data does not identify versions, CPEs, platforms, or package names, so inventory confirmation is required. Prioritize as an inventory and validation task, not an emergency patch event. Escalate if the module is internet-facing or tied to sensitive databases, because SQL injection can become high-impact when confirmed. Mitigation focus: Identify whether RS MAXSOFT fotogalerie is deployed anywhere.; Check vendor or maintainer guidance for a confirmed fix.; Remove, disable, or restrict the module if unused..

Prepared

Jun 28, 2026, 18:33 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.