CVE-2005-4251

Published: Dec 14, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) start, and (3) rand parameters to show.php, and the (4) album parameter to index.php.

Affected (3)

Products: Mcgallery: Mcgallery Pro

Mcgallery

1 product

Mcgallery Pro

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mcgallery Mcgallery Pro	Version 1.0
Mcgallery Mcgallery Pro	Version 1.1
Mcgallery Mcgallery Pro	Version 2.2

References (12)

http://pridels0.blogspot.com/2005/12/mcgallery-pro-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/18039

Source: cve@mitre.org

http://www.osvdb.org/21719

Source: cve@mitre.org

http://www.osvdb.org/21720

Source: cve@mitre.org

http://www.securityfocus.com/bid/15845

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2005/2886

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/12/mcgallery-pro-vuln.html