Sql injection

2007-06-2623:30:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.0%

JSON

SQL injection vulnerability in edit_image.asp in ClickGallery Server 5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the image_id parameter.

CPENameOperatorVersion
clickgalleryle5.0
clickgalleryeq5.1

CPE	Name	Operator	Version
	clickgallery	le	5.0
	clickgallery	eq	5.1

References

osvdb.org/36370

secunia.com/advisories/25805

exchange.xforce.ibmcloud.com/vulnerabilities/35023

pridels-team.blogspot.com/2007/06/clickgallery-server-vuln.html