← Database

CVE-2007-4207

HIGH CVSS: 7.5 Published: 2007-08-08 Modified: 2026-06-16

Description

SQL injection vulnerability in admin_console/index.asp in Gallery In A Box allows remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password field. NOTE: these fields might be associated with the txtUsername and txtPassword parameters.

Affected Platforms

Kerberosdev Gallery In A Box

Weakness Type

CWE-89

References