CVE-2008-1162

SQL injection vulnerability in album.php in PHP WEB SCRIPT Dynamic Photo Gallery 1.02 allows remote attackers to execute arbitrary SQL commands via the albumID parameter.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2008-03-05

Last modified

2024-08-07

Weaknesses

CWE-89

Affected products

• Dynamic Photo Gallery (Php Web Scripts)

References

• http://forum.aria-security.net/showthread.php?p=1521
• http://secunia.com/advisories/29212
• http://www.securityfocus.com/archive/1/489017/100/0/threaded
• http://www.securityfocus.com/bid/28067
• https://www.exploit-db.com/exploits/5211