CVE-2006-1600

The CVE-2006-1600 entry describes an SQL injection in PhpWebGallery 1.4.1 affecting category.php via the search parameter, enabling remote command execution. The underlying root cause is unsafe handling/concatenation of input in a SQL query (per the description). The NVD metrics indicate a high s...