SQL Injection in Gallarific PHP Photo Gallery Script

CVE-2011-0519

SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allows remote attackers to execute arbitrary SQL commands via the id parameter.

Vulnerability class: SQL Injection

EPSS: 0.009 (56.3th percentile) — read the EPSS interpretation.

Affected products

Gallarific Php_photo_gallery_script — versions 2.1
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)