PHPEcho CMS CVE-2007-2866 SQL-Injection Vulnerability

PHPEcho CMS CVE-2007-2866 SQL-Injection Vulnerability

PHPEcho CMS is prone to a sql-injection vulnerability. Multiple SQL injection vulnerabilities in modules/admin/modules/gallery.php in PHPEcho CMS 2.0-rc1 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter and possibly other parameters. NOTE: some of these details are obtained from third party information.