Security Advisory

CVE-2006-1659

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-04-07 10:00:00

Last updated 2024-08-07 17:19:49

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in image_desc.php, (2) provided parameter in template.php, (3) cid parameter in suggest_image.php, (4) img_id parameter in insert_rating.php, and (5) cid parameter in images.php.

← Browse all CVEs View on cve.org ↗