Multiple SQL injection vulnerabilities in galeria.php in IMGallery 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) start or (2) sort parameters.
pridels0.blogspot.com/2006/06/imgallery-vuln.html
secunia.com/advisories/20763
securitytracker.com/id?1016349
www.attrition.org/pipermail/vim/2006-June/000909.html
www.osvdb.org/26695
www.securityfocus.com/bid/18566
www.vupen.com/english/advisories/2006/2471
exchange.xforce.ibmcloud.com/vulnerabilities/27277