CVE-2006-6932 – Image Gallery with Access Database - 'default.asp' Multiple SQL Injections

https://notcve.org/view.php?id=CVE-2006-6932

Multiple SQL injection vulnerabilities in Image Gallery with Access Database allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to (a) dispimage.asp, or the (2) order or (3) page parameter to (b) default.asp. Múltiples vulnerabilidades de inyección SQL en Image Gallery con acceso a la Base de Datos permiten a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro (1) id en (a) dispimage.asp o los parámetros (2)order o (3) page en el (b) default.asp. • https://www.exploit-db.com/exploits/29054 https://www.exploit-db.com/exploits/29053 http://securityreason.com/securityalert/2147 http://www.securityfocus.com/archive/1/451875/100/0/threaded http://www.securityfocus.com/bid/21131 •