Unrated severityNVD Advisory· Published May 29, 2008· Updated Jun 16, 2026
CVE-2008-2501
CVE-2008-2501
Description
Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) album parameter to thumbnails.php and the (2) pid parameter to displayimage.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:henning_stoverud:phphotoalbum:0.5:*:*:*:*:*:*:*
- Range: =0.5
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.