Description
Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in image_desc.php, (2) provided parameter in template.php, (3) cid parameter in suggest_image.php, (4) img_id parameter in insert_rating.php, and (5) cid parameter in images.php.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 5
- SoftBiz Image Gallery - 'mage_desc.php' Multiple SQL Injections EDB-27542 · webapps · Mar 31, 2006 · verified
- SoftBiz Image Gallery - 'template.php?provided' SQL Injection EDB-27543 · webapps · Mar 31, 2006 · verified
- SoftBiz Image Gallery - 'suggest_image.php?cid' SQL Injection EDB-27544 · webapps · Mar 31, 2006 · verified
- SoftBiz Image Gallery - 'insert_rating.php?img_id' SQL Injection EDB-27545 · webapps · Mar 31, 2006 · verified
- SoftBiz Image Gallery - 'images.php?cid' SQL Injection EDB-27546 · webapps · Mar 31, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 24371 vdb-entry
- 24368 vdb-entry
- softbizimagegallery-multiple-sql-injection(25616) vdb-entry
- 17339 vdb-entry
- 20060331 SQL Injection in Softbiz Image Gallery mailing-list
- 19523 third-party-advisory
- 24370 vdb-entry
- ADV-2006-1217 vdb-entry
- 24372 vdb-entry
- 24369 vdb-entry