SQL injection vulnerability in image_gallery.php in the Akira Powered Image Gallery (image_gallery) plugin 0.9.6.2 for e107 allows remote attackers to execute arbitrary SQL commands via the image parameter in an image-detail action.Referenceshttp://secunia.com/advisories/34384http://www.securityfocus.com/bid/31286https://www.exploit-db.com/exploits/6516
