CVE-2006-6247

CVE-2006-6247 concerns multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1. The issue allows remote attackers to execute arbitrary SQL commands through the ci parameter to slideshow.asp or thumbnails.asp. The vulnerability is within the application’s handling of input without...