CVE-2005-0377

The CVE describes an SQL injection in SGallery 1.01 (imageview.php) that can be triggered via the idalbum or idimage parameters, allowing remote execution of arbitrary SQL commands. CVSS v2 base score 7.5 ( HIGH ) with network attack vector and low attack complexity; impacts on confidentiality, i...