high7.5Public exploit code
CVE-2006-6932
Multiple SQL injection vulnerabilities in Image Gallery with Access Database allow remote attackers to execute arbitrary SQL commands via (1) the id parameter …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Image Gallery with Access Database - 'default.asp' Multiple SQL Injections2006-11-16 · webapps · asp · Verified
- Image Gallery with Access Database - 'dispimage.asp?id' SQL Injection2006-11-16 · webapps · asp · Verified
Impact
Multiple SQL injection vulnerabilities in Image Gallery with Access Database allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to (a) dispimage.asp, or the (2) order or (3) page parameter to (b) default.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Image Gallery With Access Database | Image Gallery With Access Database | All versions |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/2147
- http://www.securityfocus.com/archive/1/451875/100/0/threaded
- http://www.securityfocus.com/bid/21131
- http://securityreason.com/securityalert/2147
- http://www.securityfocus.com/archive/1/451875/100/0/threaded
- http://www.securityfocus.com/bid/21131