Description
Multiple SQL injection vulnerabilities in Plogger 1.0 RC1 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) index.php or (2) gallery.php.
References
- 51228 vdb-entry
- plogger-index-gallery-sql-injection(72079) vdb-entry
- http://packetstormsecurity.org/files/view/108295/ploggerphotogallery-sql.txt
- 1027608 vdb-entry