← Database

CVE-2005-4251

HIGH CVSS: 7.5 Published: 2005-12-14 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) start, and (3) rand parameters to show.php, and the (4) album parameter to index.php.

Affected Platforms

Mcgallery Mcgallery Pro

Weakness Type

NVD-CWE-Other

References