CVE-2005-4228

CVE-2005-4228 describes multiple SQL injection vulnerabilities in PhpWebGallery versions 1.5.1 and earlier, with one vector also affecting 1.7.2 and earlier. These flaws allow remote attackers to execute arbitrary SQL commands by manipulating parameters in comments.php, category.php, and picture.php. The vulnerability carries a CVSS score of 7.5 (High), indicating a network-based attack with low complexity, requiring no authentication, and potentially leading to partial compromise of confidentiality, integrity, and availability. Its FAUCET Risk Score is 89/100. While not listed on the KEV catalog, exploit code is publicly available on ExploitDB. Despite this, there is no evidence of active exploitation, and the vulnerability has received minimal community discussion or media coverage.