← All advisories

Unrated severityNVD Advisory· Published Feb 10, 2009· Updated Jun 16, 2026

CVE-2009-0446

CVE-2009-0446

Description

SQL injection vulnerability in photo.php in WEBalbum 2.4b allows remote attackers to execute arbitrary SQL commands via the id parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Web Album/Webalbum2 versions
cpe:2.3:a:web-album:webalbum:2.4b:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:web-album:webalbum:2.4b:*:*:*:*:*:*:*
- (no CPE)range: 2.4b

Patches

Vulnerability mechanics

References

2

www.securityfocus.com/bid/33590nvdExploit
www.exploit-db.com/exploits/7961nvd

News mentions

0

No linked articles in our index yet.