CVE-2005-4251

Description

Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) start, and (3) rand parameters to show.php, and the (4) album parameter to index.php.

References

http://www.vupen.com/english/advisories/2005/2886

http://www.osvdb.org/21720

http://www.osvdb.org/21719

http://secunia.com/advisories/18039

http://pridels0.blogspot.com/2005/12/mcgallery-pro-vuln.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS