Description
Multiple SQL injection vulnerabilities in galeria.php in IMGallery 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) start or (2) sort parameters.
References
- http://pridels0.blogspot.com/2006/06/imgallery-vuln.html
- 20763 third-party-advisory
- 20060630 IMGallery - "galeria.php" not "galerie.php" mailing-list
- 1016349 vdb-entry
- ADV-2006-2471 vdb-entry
- imgallery-galeria-sql-injection(27277) vdb-entry
- 26695 vdb-entry
- 18566 vdb-entry