Vulnerabilities > CVE-2006-2214 - Unspecified vulnerability in 4Images Image Gallery Management System 1.7.1

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
4images
exploit available
NVD
Published: 2006-05-05
Updated: 2024-11-21

Summary

Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sessionid parameter in (1) top.php and (2) member.php. NOTE: this issue has also been reported to affect 1.7.2.

Vulnerable Configurations

Part Description Count
Application
4Images
2

Exploit-Db

  • description4images 1.7.1 top.php sessionid Parameter SQL Injection. CVE-2006-2214. Webapps exploit for php platform
    idEDB-ID:27780
    last seen2016-02-03
    modified2006-04-29
    published2006-04-29
    reporterCrAzY.CrAcKeR
    sourcehttps://www.exploit-db.com/download/27780/
    title4images 1.7.1 top.php sessionid Parameter SQL Injection
  • description4images 1.7.1 member.php sessionid Parameter SQL Injection. CVE-2006-2214. Webapps exploit for php platform
    idEDB-ID:27781
    last seen2016-02-03
    modified2006-04-29
    published2006-04-29
    reporterCrAzY.CrAcKeR
    sourcehttps://www.exploit-db.com/download/27781/
    title4images 1.7.1 member.php sessionid Parameter SQL Injection

References