CVE-2005-4251
mcGallery PRO 2.2 - SQL Injection via id start rand or album Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-4251. PoCs published by r0t.
AI-analyzed exploit summary The provided text describes SQL injection vulnerabilities in mcGallery PRO due to improper input sanitization. It includes example URLs demonstrating the vulnerable parameters but lacks executable exploit code.
Description
Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) start, and (3) rand parameters to show.php, and the (4) album parameter to index.php.
Exploits (2)
The provided text describes SQL injection vulnerabilities in mcGallery PRO due to improper input sanitization. It includes example URLs demonstrating the vulnerable parameters but lacks executable exploit code.
The provided text describes a vulnerability in mcGallery PRO related to input validation failures, leading to SQL injection and other attacks. It includes a generic example URL but lacks actual exploit code or technical details for execution.