CVE-2004-1415

CVE-2004-1415 – 2BGal SQL Injection affects 2BGal photo gallery (versions 2.4 and 2.5.1) via the PHP script modules, notably disp_album.php (and possibly disp_img.php). The root cause is failure to sanitize the id_album parameter, allowing remote attackers to inject arbitrary SQL commands. Conseq...

CVE-2004-1415

SQL injection vulnerability in 1 dispalbum.php and possibly 2 dispimg.php in 2Bgal 2.4 and 2.5.1 allows remote attackers to execute arbitrary SQL commands via the idalbum parameter...