Unscored CVE-2006-2302 EUVD-2006-2303GHSA-8wmx-wghv-vhp3

SQL injection vulnerability in admin_default.asp in DUGallery 2.x allows remote attackers to execute arbitrary SQL commands via the (1) Log…

Published May 11, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in admin_default.asp in DUGallery 2.x allows remote attackers to execute arbitrary SQL commands via the (1) Login or (2) password field.

References

dugallery-admindefault-sql-injection(26374) vdb-entry
17918 vdb-entry
867 third-party-advisory
20060509 # MHG Security Team --- DuGallery V2.x SQL Injection mailing-list