3 matches found
Sql injection
SQL injection vulnerability in albumdetail.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the albumid parameter...
CVE-2009-2341
Opial 1.0 contains an SQL injection in albumdetail.php exploitable via the albumid parameter. The vulnerability stems from insufficient input validation in Opial’s albumdetail.php, allowing remote attackers to inject arbitrary SQL commands. Public evidence in connected documents includes exploit ...
CVE-2009-2341
SQL injection vulnerability in albumdetail.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the albumid parameter...