CVE-2008-6488

CVE-2008-6488 describes an SQL injection in the login action of the web application SoftComplex PHP Image Gallery 1.0 . The vulnerability exists in the login functionality, where the Admin field can be exploited to execute arbitrary SQL commands remotely. According to the NVD entry, the vulnerabi...

CVE-2008-6485

CVE-2008-6485 : The connected documents confirm a SQL injection in SoftComplex PHP Image Gallery, specifically in index.php via the ctg parameter. The root cause is unsafe SQL construction in the application, enabling remote attackers to execute arbitrary SQL commands with the potential for parti...

CVE-2008-2675

CVE-2008-2675 describes a Cross-site scripting (XSS) vulnerability in index.php of PHP Image Gallery, where an attacker can inject arbitrary web script or HTML through the action parameter. This refers to the vulnerable file and parameter but does not provide version numbers or explicit root caus...