SQL injection vulnerability in category.php in PhpWebGallery 1.4.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Phpwebgallery | Phpwebgallery | 1.4.1 (including) | 1.4.1 (including) |
References