CVE-2009-2341

Opial 1.0 contains an SQL injection in albumdetail.php exploitable via the albumid parameter. The vulnerability stems from insufficient input validation in Opial’s albumdetail.php, allowing remote attackers to inject arbitrary SQL commands. Public evidence in connected documents includes exploit ...