Vulnerabilities > CVE-2006-2214 - SQL Injection vulnerability in 4Images Image Gallery Management System 1.7.1

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
4images
exploit available
NVD
Published: 2006-05-05
Updated: 2017-07-20

Summary

Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sessionid parameter in (1) top.php and (2) member.php. NOTE: this issue has also been reported to affect 1.7.2.

Vulnerable Configurations

Part Description Count
Application
4Images
2

Exploit-Db

  • description4images 1.7.1 top.php sessionid Parameter SQL Injection. CVE-2006-2214. Webapps exploit for php platform
    idEDB-ID:27780
    last seen2016-02-03
    modified2006-04-29
    published2006-04-29
    reporterCrAzY.CrAcKeR
    sourcehttps://www.exploit-db.com/download/27780/
    title4images 1.7.1 top.php sessionid Parameter SQL Injection
  • description4images 1.7.1 member.php sessionid Parameter SQL Injection. CVE-2006-2214. Webapps exploit for php platform
    idEDB-ID:27781
    last seen2016-02-03
    modified2006-04-29
    published2006-04-29
    reporterCrAzY.CrAcKeR
    sourcehttps://www.exploit-db.com/download/27781/
    title4images 1.7.1 member.php sessionid Parameter SQL Injection

References