CVE-2006-2301

SQL injection vulnerability in admin_default.asp in OzzyWork Galeri allows remote attackers to execute arbitrary SQL commands via the (1) Login or (2) password fields.

• CWE-89

• http://secunia.com/advisories/20049Vendor Advisory
• http://securityreason.com/securityalert/866
• http://securitytracker.com/id?1016053
• http://www.osvdb.org/25426
• http://www.securityfocus.com/archive/1/433358Exploit
• http://www.securityfocus.com/bid/17923
• http://www.vupen.com/english/advisories/2006/1768Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26364
• http://secunia.com/advisories/20049Vendor Advisory
• http://securityreason.com/securityalert/866
• http://securitytracker.com/id?1016053
• http://www.osvdb.org/25426
• http://www.securityfocus.com/archive/1/433358Exploit
• http://www.securityfocus.com/bid/17923
• http://www.vupen.com/english/advisories/2006/1768Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26364

Published

May 11, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-2294Cross-site scripting (XSS) vulnerability in Dynamic Galerie …
• CVE-2006-2295Directory traversal vulnerability in Dynamic Galerie 1.0 all…
• CVE-2006-2296SQL injection vulnerability in search_result.asp in EDirecto…
• CVE-2006-2297Heap-based buffer overflow in Microsoft Infotech Storage Sys…
• CVE-2006-2298The Internet Key Exchange version 1 (IKEv1) implementation i…
• CVE-2006-2300Multiple SQL injection vulnerabilities in EImagePro allow re…
• CVE-2006-2302SQL injection vulnerability in admin_default.asp in DUGaller…
• CVE-2006-2303Cross-Application Scripting (XAS) vulnerability in ICQ Clien…
• CVE-2006-2304Multiple integer overflows in the DPRPC library (DPRPCW32.DL…
• CVE-2006-2305Multiple cross-site scripting (XSS) vulnerabilities in Jadu …
• CVE-2006-2306Cross-site scripting (XSS) vulnerability in moreinfo.asp in …
• CVE-2006-2307Cross-site scripting (XSS) vulnerability in Website Baker CM…