CVE-2004-1835
Invision Gallery 1.0.1 - SQL Injection via img/cat/sort_key/order_key/user/album Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2004-1835. PoCs published by JeiAr, GulfTech Security.
AI-analyzed exploit summary This is a writeup describing SQL injection vulnerabilities in Invision Gallery 1.0.1. It lists multiple parameters that are prone to SQLi due to insufficient sanitization of user-supplied input.
Description
Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitrary SQL via the (1) img, (2) cat, (3) sort_key, (4) order_key, (5) user, or (6) album parameters.
Exploits (2)
This is a writeup describing SQL injection vulnerabilities in Invision Gallery 1.0.1. It lists multiple parameters that are prone to SQLi due to insufficient sanitization of user-supplied input.
The document describes SQL injection vulnerabilities in Invision Power Top Site List and Invision Gallery, detailing how arbitrary SQL queries can be executed via manipulated URL parameters. It includes example URLs and error messages but does not provide executable exploit code.