CVE-2006-1659: Softbizscripts Image Gallery Script

Medium severity, CVSS 6.4. EPSS: 2.2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in image_desc.php, (2) provided parameter in template.php, (3) cid parameter in suggest_image.php, (4) img_id parameter in insert_rating.php, and (5) cid parameter in images.php.

Affected products

• Softbizscripts Image Gallery Script: affected versions not specified

Published 2006-04-07. Last modified 2026-06-16.