CVE-2009-4569

SQL injection vulnerability in elkagroup Image Gallery allows remote attackers to execute arbitrary SQL commands via the id parameter to the default URI under news/.

Date published : 2010-01-05

http://www.securityfocus.com/bid/37229

http://www.exploit-db.com/exploits/10330