CVEvulnerability
CVE-2008-2501
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-05-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) album parameter to thumbnails.php and the (2) pid parameter to displayimage.php.
Affected configurations
• henning stoverud phphotoalbum 0.5
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/30407 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42670 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5683 www.exploit-db.com
- http://secunia.com/advisories/30407 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42670 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5683 www.exploit-db.com