← Database

CVE-2008-6989

HIGH CVSS: 7.5 Published: 2009-08-19 Modified: 2026-06-16

Description

SQL injection vulnerability in gallery.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter.

Affected Platforms

Ezphotogallery Ezphotogallery

Weakness Type

CWE-89

References