CVE:CVE-2008-2337
CNNVD:CNNVD-200805-248
IMGallery 2.5版本存在多个SQL注入漏洞。当magic_quotes_gpc被中止时，远程攻击者可以借助到(a)galeria.php的(1)kategoria参数以及到(b)popup/koment.php和(c)popup/opis.php的(2)id_phot参数，执行任意的SQL指令。
solution:Upgrade imgallery imgallery to a higher version than 2.5,and avoid the version 2.5