CVE-2005-0377: Undefined Security Weakness

SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to execute arbitrary SQL commands via the 1 idalbum or 2 idimage parameters...

CVE-2005-0375: Undefined Security Weakness

imageview.php in SGallery 1.01 allows remote attackers to obtain sensitive information via an HTTP request with 1 idalbum and 2 idimage unset, which reveals the installation path in an error message for the sqlfetchrow function...