CVE-2008-2501: Henning Stoverud Phphotoalbum

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) album parameter to thumbnails.php and the (2) pid parameter to displayimage.php.

Affected products

• Henning Stoverud Phphotoalbum: version 0.5 only

Published 2008-05-29. Last modified 2026-06-16.