CVE-2008-1346
SQL injection vulnerability in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action.
Date published : 2008-03-17
http://www.securityfocus.com/bid/28233
http://www.securityfocus.com/archive/1/489583/100/0/threaded