← Database

CVE-2006-6247

HIGH CVSS: 7.5 Published: 2006-12-04 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1 allow remote attackers to execute arbitrary SQL commands via the ci parameter to (1) slideshow.asp or (2) thumbnails.asp.

Affected Platforms

Uapplication Uphotogallery

Weakness Type

NVD-CWE-Other

References