← Database

CVE-2008-2501

HIGH CVSS: 7.5 Published: 2008-05-29 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) album parameter to thumbnails.php and the (2) pid parameter to displayimage.php.

Affected Platforms

Henning Stoverud Phphotoalbum

Weakness Type

CWE-89

References