CVE-2007-0502

SQL injection vulnerability in gallery.php in webSPELL 4.01.02 allows remote attackers to execute arbitrary SQL commands via the picID parameter, a different vector than CVE-2007-0492...

CVE-2007-0502

The CVE-2007-0502 entry corresponds to a SQL injection in webSPELL 4.01.02, affecting gallery.php via the picID parameter. The vulnerability is remote and allows arbitrary SQL execution; this is a separate vector from CVE-2007-0492. Connected documents confirm the affected application (webSPELL 4...