Description
SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to execute arbitrary SQL commands via the (1) idalbum or (2) idimage parameters.
References
- 20050112 [waraxe-2005-SA#039] - Critical Sql Injection in Sgallery module for PhpNuke mailing-list
- 12249 vdb-entry
- 20050112 [waraxe-2005-SA#039] - Critical Sql Injection in Sgallery module for PhpNuke mailing-list
- 13824 third-party-advisory
- sgallery-imageview-sql-injection(18876) vdb-entry
- http://www.waraxe.us/advisory-39.html
- 1012868 vdb-entry