CVE-2006-2157

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-03 · updated 2026-06-16
Weakness: CWE-89

Description

SQL injection vulnerability in gallery.php in Plogger Beta 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, when the level is set to "slideshow". NOTE: This is a different vulnerability than CVE-2005-4246.

Affected products

Plogger: 2.1-beta

References

http://retrogod.altervista.org/plogger_b21_sql_xpl.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/26273
http://retrogod.altervista.org/plogger_b21_sql_xpl.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/26273

Get alerted when CVE-2006-2157 or the next vulnerability affects your stack