CVE-2005-4251

HIGH 7.5CVE-2005-4251 · Published 14/12/2005 · updated 16/06/2026

In short

CVE-2005-4251 is a HIGH (CVSS 7.5) vulnerability affecting mcgallery pro (mcgallery).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mcgallery pro mcgallery	`= 1.0= 1.1= 2.2`	No fix yet

Description

Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) start, and (3) rand parameters to show.php, and the (4) album parameter to index.php.

References

pridels0.blogspot.com/2005/12/mcgallery-pro-vuln.html
secunia.com/advisories/18039
osvdb.org/21719
osvdb.org/21720
securityfocus.com/bid/15845 · Exploit
vupen.com/english/advisories/2005/2886

More vulnerabilities in mcgallery pro

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free