high7.5
CVE-2005-0377
SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to execute arbitrary SQL commands via the (1) idalbum or (2) idimage par…
Impact
SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to execute arbitrary SQL commands via the (1) idalbum or (2) idimage parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sergey Kiselev | Sgallery | Version 1.01 |
References
- NVD record
- CVE.org record
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030844.html
- http://marc.info/?l=bugtraq&m=110557050700947&w=2
- http://secunia.com/advisories/13824
- http://securitytracker.com/id?1012868
- http://www.securityfocus.com/bid/12249
- http://www.waraxe.us/advisory-39.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18876
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030844.html
- http://marc.info/?l=bugtraq&m=110557050700947&w=2
- http://secunia.com/advisories/13824
- http://securitytracker.com/id?1012868
- http://www.securityfocus.com/bid/12249
- http://www.waraxe.us/advisory-39.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18876