Unrated severityNVD Advisory· Published Aug 19, 2009· Updated Jun 16, 2026

CVE-2008-6989

Description

SQL injection vulnerability in gallery.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ezphotogallery/Ezphotogallery
cpe:2.3:a:ezphotogallery:ezphotogallery:2.1:*:*:*:*:*:*:*
Easy Photo Gallery/gallery.phpllm-create
Range: =2.1
Ezphotogallery/gallery.phpllm-create
Range: =2.1

Patches

Vulnerability mechanics

References

secunia.com/advisories/31774nvdVendor Advisory
www.osvdb.org/48315nvd
www.securityfocus.com/archive/1/496220/100/0/threadednvd
www.exploit-db.com/exploits/6428nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000