CVE-2010-3207

CVE-2010-3207 : A SQL injection in the PHP file index.php of GaleriaSHQIP 1.0 is possible when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to modify the underlying SQL via the album_id parameter, per the NVD entry (base score 6.8, MEDIUM). The affected component is the...