Beveiligingsadvies
CVE-2006-2214
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sessionid parameter in (1) top.php and (2) member.php. NOTE: this issue has also been reported to affect 1.7.2.