CVE-2006-2993

Published: Jun 13, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in (1) Displayview.asp and (2) Details_Photo_bv.asp.

Affected (1)

Products: My Photo Scrapbook: My Photo Scrapbook

My Photo Scrapbook

1 product

My Photo Scrapbook

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
My Photo Scrapbook My Photo Scrapbook	version ≤ 1.0

References (14)

http://pridels0.blogspot.com/2006/06/my-photo-scrapbook-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/20554

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/26281

Source: cve@mitre.org

http://www.osvdb.org/26282

Source: cve@mitre.org

http://www.securityfocus.com/bid/18418

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2244

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27087

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/06/my-photo-scrapbook-vuln.html