← Database

CVE-2008-0129

MEDIUM CVSS: 6.8 Published: 2008-01-08 Modified: 2026-06-16

Description

SQL injection vulnerability in starnet/addons/slideshow_full.php in Site@School 2.3.10 and earlier allows remote attackers to execute arbitrary SQL commands via the album_name parameter.

Affected Platforms

Siteatschool Siteatschool

Weakness Type

CWE-89

References