CVE:CVE-2006-1667
CNNVD:CNNVD-200604-093
Eric Gerdes Crafty Syntax Image Gallery(CSIG)(又称PHP缩略图图片库)3.1g和早期版本的slides.php中存在SQL注入漏洞，可让远程认证用户执行任意的SQL命令，方式是通过在$projectid变量小于1情况下的limitquery_s参数，那是用来阻止在slides.php中设置$limitquery_s参数。
solution:Upgrade crafty_syntax_image_gallery crafty_syntax_image_gallery to a higher version than 3.1g,and avoid the version 3.1g