PT-2006-2584 · Monalbum · Monalbum

Name of the Vulnerable Software and Affected Versions: MonAlbum version 0.8.7 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved through SQL injection vulnerabilities in multiple parameters, including pc in index.php, and pnom, pcourriel, pcommentai...

CVE-2006-1585: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MonAlbum 0.8.7 allow remote attackers to execute arbitrary SQL commands via 1 the pc parameter in a index.php and 2 pnom, 3 pcourriel, and 4 pcommentaire parameters in b imageagrandir.php...