CVE-2009-0423: Kevin Walker PHP Photo Album

High severity, CVSS 7.5. EPSS: 6.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in index.php in Php Photo Album (PHPPA) 0.8 BETA allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the preview parameter.

Affected products

• Kevin Walker PHP Photo Album: version 0.8 only

Published 2009-02-05. Last modified 2026-06-16.