CVE-2011-0519

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allows remote attackers to execute arbitrary SQL commands via the id parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/42792Vendor Advisory
http://www.exploit-db.com/exploits/15891Exploit
http://secunia.com/advisories/42792Vendor Advisory
http://www.exploit-db.com/exploits/15891Exploit

Timeline

Published: Jan 20, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-05207.5The compress_add_dlabel_points function in dns/Compress.c in MaraDNS 1.4.03, 1.4.05, and probably other versions allows remote attackers to CVE-2011-05217.2The dvb_ca_ioctl function in drivers/media/dvb/ttpci/av7110_ca.c in the Linux kernel before 2.6.38-rc2 does not check the sign of a certain CVE-2011-05226.8The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.CVE-2011-05231.9gypsy 0.8 does not properly restrict the files that can be read while running with root privileges, which allows local users to read otherwi CVE-2011-05242.1Multiple buffer overflows in the NMEA parser (nmea-gen.c) in gypsy 0.8 allow local users to cause a denial of service (crash) via unspecifie CVE-2011-05258.8Batavi before 1.0 has CSRF.CVE-2011-05264.3Cross-site scripting (XSS) vulnerability in index.php in Vanilla Forums before 2.0.17 allows remote attackers to inject arbitrary web script CVE-2011-05275.0VMware vFabric tc Server (aka SpringSource tc Server) 2.0.x before 2.0.6.RELEASE and 2.1.x before 2.1.2.RELEASE accepts obfuscated passwords CVE-2011-05285.5Puppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote authenticated Puppet nodes to read or mo CVE-2011-05297.5Weborf before 0.12.5 is affected by a Denial of Service (DOS) due to malformed fields in HTTP.CVE-2011-05307.5Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attack CVE-2011-05319.3demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of se