CVE-2006-6370 | BDVDB-2026-20762 Detail

Description#

SQL injection vulnerability in forum/modules/gallery/post.php in Invision Gallery 2.0.7 allows remote attackers to cause a denial of service and possibly have other impacts, as demonstrated using a "SELECT BENCHMARK" statement in the img parameter in a doaddcomment operation in index.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/453167/100/100/threaded
http://www.securityfocus.com/archive/1/453468/100/0/threaded

Exploit#

No public exploit known

History#

Version 12006-12-07Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.