Security Advisory

CVE-2006-6195

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2006-12-01 00:00:00
Last updated 2024-08-07 20:19:34
Assigner mitre
State PUBLISHED

Description

Multiple SQL injection vulnerabilities in Fixit iDMS Pro Image Gallery allow remote attackers to execute arbitrary SQL commands via the (1) show_id or (2) parentid parameter to (a) filelist.asp, or the (3) fid parameter to (b) showfile.asp.