CVE-2006-1659

Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in image_desc.php, (2) provided parameter in template.php, (3) cid parameter in suggest_image.php, (4) img_id parameter in insert_rating.php, and (5) cid parameter in images.php.

• http://secunia.com/advisories/19523Vendor Advisory
• http://www.osvdb.org/24368Broken Link
• http://www.osvdb.org/24369Broken Link
• http://www.osvdb.org/24370Broken Link
• http://www.osvdb.org/24371Broken Link
• http://www.osvdb.org/24372Broken Link
• http://www.securityfocus.com/archive/1/429763/100/0/threadedBroken Link
• http://www.securityfocus.com/bid/17339Exploit
• http://www.vupen.com/english/advisories/2006/1217Not Applicable
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25616Third Party Advisory
• http://secunia.com/advisories/19523Vendor Advisory
• http://www.osvdb.org/24368Broken Link
• http://www.osvdb.org/24369Broken Link
• http://www.osvdb.org/24370Broken Link
• http://www.osvdb.org/24371Broken Link
• http://www.osvdb.org/24372Broken Link
• http://www.securityfocus.com/archive/1/429763/100/0/threadedBroken Link
• http://www.securityfocus.com/bid/17339Exploit
• http://www.vupen.com/english/advisories/2006/1217Not Applicable
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25616Third Party Advisory

Published

Apr 7, 2006

Last Modified

Jun 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1653PHP remote file inclusion vulnerability in loadkernel.php in…
• CVE-2006-1654Directory traversal vulnerability in the HP Color LaserJet 2…
• CVE-2006-1655Multiple buffer overflows in mpg123 0.59r allow user-assiste…
• CVE-2006-1656vserver in util-vserver 0.30.209 executes a command as root …
• CVE-2006-1657Cross-site scripting (XSS) vulnerability in index.php in Chu…
• CVE-2006-1658Direct static code injection vulnerability in ticker.db.php …
• CVE-2006-1660Cross-site scripting (XSS) vulnerability in image_desc.php i…
• CVE-2006-1661Multiple cross-site scripting (XSS) vulnerabilities in SKFor…
• CVE-2006-1662The frontpage option in Limbo CMS 1.0.4.2 and 1.0.4.1 allows…
• CVE-2006-1663Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2006-1664Buffer overflow in xine_list_delete_current in libxine 1.14 …
• CVE-2006-1665Multiple cross-site scripting (XSS) vulnerabilities in Arab …