CVE-2008-6989

CVE-2008-6989 concerns Easy Photo Gallery (Ezphotogallery) 2.1, where gallery.php is vulnerable to SQL injection via the username parameter. The root cause is improper handling of the username input, allowing remote attackers to execute arbitrary SQL commands. Documented impact indicates the vuln...