Phpwebgallery <= 1.4.1 SQL injection Vulnerability

From: <t4h4_at_linuxmail.org>
Date: 3 Apr 2006 14:07:26 -0000

('binary' encoding is not supported, stored as-is) Moroccan Security Team (|ucif3r)
Greetz To All Freind

Phpwebgallery 1.4.1 is vulnerable to SQL Injection Attacks

The flaw is due to input validation errors in the "category.php" script when handling the "search"variables, which could be exploited by malicious people to conduct SQL injection attacks.

Exploit:

http://localhost/phpwebgallery/category.php?cat=search&search=[SQL]

t4h4[at]linuxmail[dot]com :D
Received on Apr 03 2006