Exploitation Summary
EIP tracks 5 public exploits for CVE-2006-1659. PoCs published by Linux_Drox.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in Softbiz Image Gallery, where the 'provided' parameter in template.php is not properly sanitized. It lacks actual exploit code but outlines the vulnerability and potential impact.
Description
Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in image_desc.php, (2) provided parameter in template.php, (3) cid parameter in suggest_image.php, (4) img_id parameter in insert_rating.php, and (5) cid parameter in images.php.
Exploits (5)
The provided text describes a SQL injection vulnerability in Softbiz Image Gallery, where the 'provided' parameter in template.php is not properly sanitized. It lacks actual exploit code but outlines the vulnerability and potential impact.
The provided text describes a SQL injection vulnerability in Softbiz Image Gallery, where the 'cid' parameter in 'suggest_image.php' is not properly sanitized. This allows attackers to inject malicious SQL queries, potentially compromising the application or underlying database.
The provided text describes a SQL injection vulnerability in Softbiz Image Gallery, where the 'id' parameter in 'image_desc.php' is not properly sanitized. This allows attackers to manipulate SQL queries, potentially compromising the application or underlying database.
The provided text describes a SQL injection vulnerability in Softbiz Image Gallery, specifically in the 'insert_rating.php' script. It lacks executable exploit code but outlines the vulnerability and potential impact.
The provided text describes a SQL injection vulnerability in Softbiz Image Gallery, where the 'cid' parameter in 'images.php' is not properly sanitized. It lacks actual exploit code, serving only as a vulnerability description.