NetSight
high7.5

CVE-2006-1600

SQL injection vulnerability in category.php in PhpWebGallery 1.4.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.

Impact

SQL injection vulnerability in category.php in PhpWebGallery 1.4.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.

Affected products

VendorProductAffected versions
PhpwebgalleryPhpwebgallery
Version 1.4.1

References