EUVD-2006-3160

Malware in sbrugna...

CVE-2006-3163

Multiple SQL injection vulnerabilities in galeria.php in IMGallery 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 start or 2 sort parameters...

CVE-2006-3163

Vulnerability (CVE-2006-3163): IMGallery 2.4 and earlier contain multiple SQL injection flaws in galeria.php. Remote attackers can execute arbitrary SQL commands via the (1) start or (2) sort parameters, potentially impacting data confidentiality and integrity depending on backend permissions.