CVEvulnerability
CVE-2011-0519
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-01-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected configurations
• gallarific php photo gallery script 2.1
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/42792 Vendor Advisory
- http://www.exploit-db.com/exploits/15891 Exploit
- http://secunia.com/advisories/42792 Vendor Advisory
- http://www.exploit-db.com/exploits/15891 Exploit