CVE-2006-2202 - SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute

CVE-2006-2202

Summary

SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album parameter.

References

Vulnerable Configurations

cpe:2.3:a:invision_power_services:invision_gallery:2.0.6:*:*:*:*:*:*:*
cpe:2.3:a:invision_power_services:invision_gallery:2.0.6:*:*:*:*:*:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:N

refmap via4

bid	17793
bugtraq	20060502 Invision Gallery 2.0.6 ( SQL Injection ) 20060504 Re: Invision Gallery 2.0.6 ( SQL Injection )
osvdb	25231
sectrack	1016019
secunia	19948
sreason	841
vupen	ADV-2006-1655
xf	invisiongallery-album-sql-injection(26224)

Last major update

18-10-2018 - 16:38

Published

04-05-2006 - 17:06

Last modified

18-10-2018 - 16:38