← Database

CVE-2007-6393

MEDIUM CVSS: 6.5 Published: 2007-12-17 Modified: 2026-06-16

Description

SQL injection vulnerability in albums.php in Ace Image Hosting Script allows remote authenticated users to execute arbitrary SQL commands via the id parameter in editalbum mode.

Affected Platforms

Ace Image Hosting Script Ace Image Hosting Script

Weakness Type

CWE-89

References