SQL Injection in Henning Stoverud Phphotoalbum
CVE-2008-2501
Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) album parameter to thumbnails.php and the (2) pid parameter to displayimage.php.
Vulnerability class: SQL Injection
EPSS: 0.010 (59.5th percentile) — read the EPSS interpretation.
Affected products
- Henning_stoverud Phphotoalbum — versions 0.5
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)