CVE:CVE-2006-6932
CNNVD:CNNVD-200701-207
带有访问数据库的Image Gallery中存在多个SQL注入漏洞。远程攻击者可以借助提交到(a)dispimage.asp的(1)id参数或到(b)default.asp的(2)order或(3)页参数，执行任意的SQL指令。
solution:Upgrade image_gallery_with_access_database image_gallery_with_access_database to a higher version than *