CVE-2006-2202 — SQL Injection in Power Services Invision Gallery

2 documents2 sources
Severity
6.4MEDIUMNVD
EPSS
1.0%
top 23.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Invision Power Services Invision Gallery
Timeline
PublishedMay 4
Latest updateMay 1

Description

SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album parameter.

CVSS vector

AV:N/AC:L/C:P/I:P/A:NExploitability: 10.0 | Impact: 4.9

Affected Packages1 packages

Patches

Patch: secunia.com ↗Patch: www.securityfocus.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-hjpx-35fm-2cpp: SQL injection vulnerability in post↗2022-05-01
▶