CVE-2006-6117

SQL injection vulnerability in index1.asp in fipsGallery 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the which parameter...

CVE-2006-6117

CVE-2006-6117 is a SQL injection vulnerability in the index1.asp component of fipsGallery 1.5 and earlier. It allows remote attackers to inject arbitrary SQL commands via the irrelevant-parameter named “which”, potentially compromising data through the affected page. The CVSS2 base score is 7.5 (...