CVE-2008-2337

CVE-2008-2337 affects IMGallery 2.5, with multiple SQL injection vulnerabilities when magic_quotes_gpc is disabled. Exploitable via the (1) kategoria parameter to galeria.php and (2) id_phot parameter to popup/koment.php and popup/opis.php, per primary description. Connected records also link to ...