CVE-2009-2341 - SQL injection vulnerability in albumdetail.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the albumid parameter

HIGH

SQL injection vulnerability in albumdetail.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the albumid parameter

Published Jul 7, 2009

7.5

HIGH

CVSS 2.0

EPSS 0.97%

SQL injection vulnerability in albumdetail.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the albumid parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

http://osvdb.org/55561
vdb-entryx_refsource_OSVDBExploit
http://secunia.com/advisories/35677
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/9080
exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/35562
vdb-entryx_refsource_BIDExploit

Link	Providers	Tags
http://osvdb.org/55561		vdb-entryx_refsource_OSVDBExploit
http://secunia.com/advisories/35677		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/9080		exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/35562		vdb-entryx_refsource_BIDExploit

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jul 7, 2009

Updated Aug 7, 2024

Reserved Jul 7, 2009

Updated n/a

Status Modified

Modified Jun 16, 2026

Severity n/a

Public date n/a