CVE-2007-4207

CVE-2007-4207 affects Gallery In A Box, via an SQL injection in admin_console/index.asp. The vulnerability allows remote attackers to execute arbitrary SQL commands through the Username or Password fields (potentially txtUsername/txtPassword). Exploitation is described as network-based and unauth...