high7.5Public exploit code
CVE-2004-1835
Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitrary SQL via the (1) img, (2) cat, (3) sor…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Invision Power Services Invision Gallery 1.0.1 - Multiple SQL Injections2004-03-23 · webapps · php · Verified
- Invision Gallery < 1.0.1 - SQL Injection2004-03-21 · webapps · php
Impact
Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitrary SQL via the (1) img, (2) cat, (3) sort_key, (4) order_key, (5) user, or (6) album parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Invision Power Services | Invision Gallery | Version 1.0.1 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107997906500032&w=2
- http://secunia.com/advisories/11194
- http://securitytracker.com/id?1009512
- http://www.osvdb.org/4472
- http://www.securityfocus.com/bid/9944
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15566
- http://marc.info/?l=bugtraq&m=107997906500032&w=2
- http://secunia.com/advisories/11194
- http://securitytracker.com/id?1009512
- http://www.osvdb.org/4472
- http://www.securityfocus.com/bid/9944
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15566