SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to execute arbitrary SQL commands via the (1) idalbum or (2) idimage parameters.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Sgallery | Sergey_kiselev | 1.01 (including) | 1.01 (including) |