PatchTheCVEphoto album vulnerabilities and fixes
Recent CVEs affecting photo album, with upgrade or downgrade steps. 3 tracked.
Also searched as: photoalbum.
photo album has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2008-01-16. Highest priority: CVE-2005-1114 (score 49/100).
- CVE-2008-0292 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in photo_album.pl in Dansie Photo Album 1.0 allows remote attackers t
- CVE-2005-1115 MEDIUM 4.3 DOWNGRADE DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Photo Album 2.0.53 module for phpBB allow remote attack
- CVE-2005-1114 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple SQL injection vulnerabilities in album_search.php in Photo Album 2.0.53 for phpBB allow remote attack
FAQ
How do I fix photo album vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is photo album being exploited right now?
None of the tracked photo album CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which photo album CVE should I patch first?
CVE-2005-1114 currently ranks highest (49/100): Multiple SQL injection vulnerabilities in album_search.php in Photo Album 2.0.53 for phpBB allow remote attack.