CVE:CVE-2006-6187
CNNVD:CNNVD-200611-501
ClickTech Click Gallery存在多个SQL注入漏洞，远程攻击者可通过传给(a)view_gallery.asp的(1)currentpage或(2)gallery_id参数，传给(b)download_image.asp的(3)image_id参数，传给(c)gallery.asp的currentpage或(5)orderby参数，或者传给(d)view_recent.asp的currentpage参数，来执行任意SQL命令。
solution:Upgrade clicktech clickgallery to a higher version than 5.1,5.0,and avoid the version (,5.1],5.0