Description
SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album parameter.
References
- 1016019 vdb-entry
- 19948 third-party-advisory
- 17793 vdb-entry
- 20060502 Invision Gallery 2.0.6 ( SQL Injection ) mailing-list
- 25231 vdb-entry
- 20060504 Re: Invision Gallery 2.0.6 ( SQL Injection ) mailing-list
- invisiongallery-album-sql-injection(26224) vdb-entry
- 841 third-party-advisory
- ADV-2006-1655 vdb-entry