CVE-2008-6788

CVE-2008-6788 concerns MindDezign Photo Gallery 2.2. The issue is a SQL injection via the id parameter in an info action to index.php, exploitable when magic_quotes_gpc is disabled. The underlying vulnerability arises from unsafeguarded input leading to arbitrary SQL execution by remote attackers...