CVE-2009-0531

CVE-2009-0531 describes an SQL injection in the web application component gallery/view.asp of the A Better Member-Based ASP Photo Gallery prior to version 1.2. The root cause is improper handling of input for the entry parameter, enabling an attacker to send crafted SQL commands and potentially i...