CVE-2006-3163
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.0%
Multiple SQL injection vulnerabilities in galeria.php in IMGallery 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) start or (2) sort parameters.
Affected configurations
References
pridels0.blogspot.com/2006/06/imgallery-vuln.html
secunia.com/advisories/20763
securitytracker.com/id?1016349
www.attrition.org/pipermail/vim/2006-June/000909.html
www.osvdb.org/26695
www.securityfocus.com/bid/18566
www.vupen.com/english/advisories/2006/2471
exchange.xforce.ibmcloud.com/vulnerabilities/27277
Related
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.0%