Summary
The remote host is running SGallery, a module for PHP-Nuke.
A critical SQL injection in the remote version of this module has been found, this vulnerability allows a remote attacker via the 'idimage' variable to inject arbitrary SQL statements in the remote SQL database.
Solution
Upgrade to the latest version of this software.
Severity
Classification
-
CVE CVE-2005-0377 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities