CVE-2006-6932 Multiple SQL injection vulnerabilities in Image Gallery with Access Database allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to (a) dispimage.asp, or the (2) order or...
HighCVSS 7.5
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in Image Gallery with Access Database allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to (a) dispimage.asp, or the (2) order or (3) page parameter to (b) default.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| image gallery with access database | All versions | No fix listed |
References
- 2147 third-party-advisory
- 20061116 Image gallery with Access Database SQL Injection mailing-list
- 21131 vdb-entry