CVE-2006-2912: Out Of The Trees Web Design Selectapix

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in SelectaPix 1.31 allow remote attackers to execute arbitrary SQL commands via the (1) albumID parameter to (a) view_album.php or (b) index.php, (2) imageID parameter to (c) popup.php, or (3) username and (4) password parameters to (d) admin/member.php.

Affected products

• Out Of The Trees Web Design Selectapix: version 1.31 only

Published 2006-06-09. Last modified 2026-06-16.