Unrated severityNVD Advisory· Published May 29, 2008· Updated Apr 23, 2026

CVE-2008-2501

Description

Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) album parameter to thumbnails.php and the (2) pid parameter to displayimage.php.

Affected products

Henning Stoverud/Phphotoalbum
cpe:2.3:a:henning_stoverud:phphotoalbum:0.5:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/30407nvdVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/42670nvd
www.exploit-db.com/exploits/5683nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000