CVE-2006-6932

Published: Jan 16, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in Image Gallery with Access Database allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to (a) dispimage.asp, or the (2) order or (3) page parameter to (b) default.asp.

Affected (1)

Products: Image Gallery With Access Database: Image Gallery With Access Database

Image Gallery With Access Database

1 product

Image Gallery With Access Database

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Image Gallery With Access Database Image Gallery With Access Database	All versions

References (6)

http://securityreason.com/securityalert/2147

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/451875/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/21131

Source: cve@mitre.org

http://securityreason.com/securityalert/2147

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/451875/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/21131

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.