RSS   Vulnerabilities for 'Gallery in a box'   RSS

2007-08-07
 
CVE-2007-4207

CWE-89
 

 
SQL injection vulnerability in admin_console/index.asp in Gallery In A Box allows remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password field. NOTE: these fields might be associated with the txtUsername and txtPassword parameters.

 


Copyright 2019, cxsecurity.com

 

Back to Top