CVE-2009-1799

CVE-2009-1799 affects ST-Gallery 0.1 alpha. The vulnerability is in getGalleryImage() within st_admin/gallery_output.php, where SQL injection is possible when magic_quotes_gpc is disabled. Remote attackers can exploit via the gallery_category or gallery_show parameters to example.php to execute a...