Unrated severityNVD Advisory· Published Apr 27, 2006· Updated Jun 16, 2026
CVE-2006-2080
CVE-2006-2080
Description
SQL injection vulnerability in portfolio_photo_popup.php in Verosky Media Instant Photo Gallery 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, which is not cleansed before calling the count_click function in includes/functions/fns_std.php. NOTE: this issue could produce resultant XSS.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:verosky_media:instant_photo_gallery:1.0.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:verosky_media:instant_photo_gallery:1.0.2:*:*:*:*:*:*:*
- (no CPE)range: = 1.0.2
Patches
Vulnerability mechanics
References
9- www.securityfocus.com/bid/17696nvdExploit
- attrition.org/pipermail/vim/2006-April/000733.htmlnvd
- secunia.com/advisories/19813nvd
- securityreason.com/securityalert/803nvd
- www.osvdb.org/24986nvd
- www.osvdb.org/24987nvd
- www.securityfocus.com/archive/1/432024/100/0/threadednvd
- www.securityfocus.com/archive/1/432241/100/0/threadednvd
- www.vupen.com/english/advisories/2006/1533nvd
News mentions
0No linked articles in our index yet.