Login Request a demo
Unscored severity · published May 4, 2006
CVE-2006-2202
SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album parameter
–
CVSS
1.6%
EPSS
No
On KEV
Description
SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IG
Invision Gallery · Invision Power Services
2.0.6 · source: NVD
Affected product
IG
Invision Gallery
Invision Power Services
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-2202
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-2202
Patch
http://secunia.com/advisories/19948
securityreason.com
http://securityreason.com/securityalert/841
securitytracker.com
http://securitytracker.com/id?1016019
www.osvdb.org
http://www.osvdb.org/25231
www.securityfocus.com
http://www.securityfocus.com/archive/1/432731/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/432952/100/0/threaded
More from Invision Gallery
–
CVE-2008-0421
SQL injection vulnerability in Invision Gallery 2.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the album parameter in a rate command
–
CVE-2006-6370
SQL injection vulnerability in forum/modules/gallery/post.php in Invision Gallery 2.0.7 allows remote attackers to cause a denial of service and possibly have other impacts, as…
–
CVE-2006-5205
Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a
–
CVE-2006-5206
SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in (1) index.php and (2) forum/index.php,…
–
CVE-2005-3477
Multiple interpretation error in the image upload handling code in Invision Gallery 2.0.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML or script…