CVE-2006-3163

Published: Jun 22, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in galeria.php in IMGallery 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) start or (2) sort parameters.

Affected (1)

Products: Imgallery: Imgallery

Imgallery

1 product

Imgallery

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Imgallery Imgallery	Up to 2.4

References (16)

http://pridels0.blogspot.com/2006/06/imgallery-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/20763

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1016349

Source: cve@mitre.org

http://www.attrition.org/pipermail/vim/2006-June/000909.html

Source: cve@mitre.org

http://www.osvdb.org/26695

Source: cve@mitre.org

http://www.securityfocus.com/bid/18566

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2471

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27277

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/06/imgallery-vuln.html