Unscored CVE-2006-2301 EUVD-2006-2302GHSA-f78p-f3wm-c642

SQL injection vulnerability in admin_default.asp in OzzyWork Galeri allows remote attackers to execute arbitrary SQL commands via the (1) L…

Published May 11, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in admin_default.asp in OzzyWork Galeri allows remote attackers to execute arbitrary SQL commands via the (1) Login or (2) password fields.

References

ozzyworkgaleri-admindefault-sql-injection(26364) vdb-entry
ADV-2006-1768 vdb-entry
1016053 vdb-entry
17923 vdb-entry
20049 third-party-advisory
25426 vdb-entry
20060509 # MHG Security Team --- OzzyWork Gallery SQL Injection mailing-list
866 third-party-advisory