CVE-2005-4228

The provided text describes SQL injection vulnerabilities in PhpWebGallery, detailing vulnerable parameters in the comments.php file. It includes example URLs demonstrating how an attacker could inject malicious SQL queries.

The provided text describes a SQL injection vulnerability in PhpWebGallery, where the 'image_id' parameter in 'picture.php' is not properly sanitized. It lacks actual exploit code but outlines the vulnerability and potential impact.

This is a writeup describing SQL injection vulnerabilities in PhpWebGallery. It provides a URL example demonstrating how an attacker can inject SQL queries via the 'search' parameter.