CVE-2007-4207

2007-08-08T02:17:00
ID CVE-2007-4207
Type cve
Reporter cve@mitre.org
Modified 2018-10-15T21:33:00

Description

SQL injection vulnerability in admin_console/index.asp in Gallery In A Box allows remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password field. NOTE: these fields might be associated with the txtUsername and txtPassword parameters.