Myisoft EasyGallery Cross Site Scripting / SQL Injection

Exploit Title: MYISOFT EasyGallery SQL Injection - Blind SQL Injection - Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE SQL Injection, Blind SQL Injection and XSS can be done using the command input...