Sql injection

SQL injection vulnerability in index.php in NITRO Web Gallery allows remote attackers to execute arbitrary SQL commands via the PictureId parameter in an open action...

CVE-2010-2141

SQL injection vulnerability in index.php in NITRO Web Gallery allows remote attackers to execute arbitrary SQL commands via the PictureId parameter in an open action...

CVE-2010-2141

CVE-2010-2141 affects the NITRO Web Gallery. The vulnerability is an SQL injection in index.php, exploitable via the PictureId parameter in an open action, allowing remote attackers to run arbitrary SQL commands. The issue is documented across multiple sources (NVD/NVD mirrors, CVE records, and a...