Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitrary SQL via the (1) img (2) cat (3) sort_key (4) order_key (5) user or (6) album parameters.