Vulnerabilities

TI-2009-00426 CVE-2009-0446 · GHSA-762h-m3v5-4v7h

SQL injection vulnerability in photo.php in WEBalbum 2.4b allows remote attackers to…

LOW 35

SQL injection vulnerability in photo.php in WEBalbum 2.4b allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0095 Published 2009-02-05 No fix listed CWE-89

TI-2008-02580 CVE-2008-2698 · GHSA-q783-99c3-p38v

Multiple cross-site scripting (XSS) vulnerabilities in photo_add-c.php (aka the "add…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in photo_add-c.php (aka the "add comment" section) in WEBalbum 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) id…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01033 Published 2008-06-13 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in photo.php in WEBalbum 2.4b allows remote attackers to…

Multiple cross-site scripting (XSS) vulnerabilities in photo_add-c.php (aka the "add…