CVE-2004-1415

SQL injection vulnerability in 1 dispalbum.php and possibly 2 dispimg.php in 2Bgal 2.4 and 2.5.1 allows remote attackers to execute arbitrary SQL commands via the idalbum parameter...

2bgalSQL.txt

2Bgal 2.5.1 SQL injection Vulnerability http://www.ben3w.com/ 12/22/2004 ---------------------------------------------------------------------- Description: ---------------------------------------------------------------------- 2Bgal is fully customizable photo gallery. It's seems to be vulnerabl...

2BGal disp_album.php id_album Parameter SQL Injection

The remote host appears to be running 2BGal, a photo gallery software written in PHP. There is a flaw in the 'dispalbum.php' script which fails to sanitize input to the 'idalbum' field. This may allow anyone to inject arbitrary SQL commands. An attacker could exploit this to obtain sensitive...

2Bgal : 2.4 & 2.5.1 SQL injection Vulnerability

2Bgal 2.5.1 SQL injection Vulnerability http://www.ben3w.com/ 12/22/2004 ---------------------------------------------------------------------- Description: ---------------------------------------------------------------------- 2Bgal is fully customizable photo gallery. It's seems to be vulnerabl...