CVE-2006-2301

The CVE-2006-2301 entry concerns a SQL injection vulnerability in OzzyWork Galeri’s admin_default.asp, exploitable via the (1) Login or (2) password fields. The underlying flaw is unsafely constructed SQL queries that allow remote attackers to inject arbitrary SQL commands. Related records confir...