CVE-2006-3027

CVE-2006-3027 involves Enthrallwebe ePhotos 2.2 and earlier with multiple SQL injection vulnerabilities. The issues arise from unsafely handling user-supplied parameters: CAT_ID (in subphotos.asp and subLevel2.asp), AL_ID (in photo.asp), and SUB_ID (in subLevel2.asp), enabling remote attackers to...