CVE-2006-3163

Vulnerability (CVE-2006-3163): IMGallery 2.4 and earlier contain multiple SQL injection flaws in galeria.php. Remote attackers can execute arbitrary SQL commands via the (1) start or (2) sort parameters, potentially impacting data confidentiality and integrity depending on backend permissions.