CVE coverage

CVE-2006-6370

CVSS 7.5 10 detections found

SQL injection vulnerability in forum/modules/gallery/post.php in Invision Gallery 2.0.7 allows remote attackers to cause a denial of service and possibly have other impacts, as demonstrated using a "SELECT BENCHMARK" statement in the img parameter in a doaddcomment operation in index.php.

Detection rules

Source	Rule	Status	Updated
suricata	ET WEB_SPECIFIC_APPS Invision Gallery SQL Injection Attempt -- post.php img SELECT	rev 10	2020-09-11
suricata	ET WEB_SPECIFIC_APPS Invision Gallery SQL Injection Attempt -- post.php img UNION SELECT	rev 10	2020-09-11
suricata	ET WEB_SPECIFIC_APPS Invision Gallery SQL Injection Attempt -- post.php img INSERT	rev 10	2020-09-11
suricata	ET WEB_SPECIFIC_APPS Invision Gallery SQL Injection Attempt -- post.php img DELETE	rev 10	2020-09-11
suricata	ET WEB_SPECIFIC_APPS Invision Gallery SQL Injection Attempt -- post.php img UPDATE	rev 10	2020-09-11
snort	ET WEB_SPECIFIC_APPS Invision Gallery SQL Injection Attempt -- post.php img SELECT	rev 7	2010-11-30
snort	ET WEB_SPECIFIC_APPS Invision Gallery SQL Injection Attempt -- post.php img UNION SELECT	rev 7	2010-11-30
snort	ET WEB_SPECIFIC_APPS Invision Gallery SQL Injection Attempt -- post.php img INSERT	rev 7	2010-11-30
snort	ET WEB_SPECIFIC_APPS Invision Gallery SQL Injection Attempt -- post.php img DELETE	rev 7	2010-11-30
snort	ET WEB_SPECIFIC_APPS Invision Gallery SQL Injection Attempt -- post.php img UPDATE	rev 7	2010-11-30