VYPR

Photo Album

by Smartor

CVEs (2)

CVESevRiskCVSSEPSSKEVPublishedDescription
CVE-2005-11150.000.00May 2, 2005Multiple cross-site scripting (XSS) vulnerabilities in Photo Album 2.0.53 module for phpBB allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) album_cat.php or (2) album_comment.php.
CVE-2005-11140.000.01May 2, 2005Multiple SQL injection vulnerabilities in album_search.php in Photo Album 2.0.53 for phpBB allow remote attackers to execute arbitrary SQL commands via the (1) mode or (2) search parameters.