CVE-2005-0929

PhotoPost PHP Pro 5.x contains a SQL injection vulnerability exploitable via the sl parameter in showmembers.php or the photo parameter in showphoto.php, allowing remote attackers to potentially execute arbitrary SQL commands. The issue is caused by unsafely handling user-supplied input in these ...