CVE-2008-2501

This exploit demonstrates SQL injection vulnerabilities in PHPhotoalbum v0.5 by injecting malicious SQL queries into the 'album' and 'pid' parameters, leading to information disclosure such as database version, user, and current database name.

This exploit demonstrates a SQL injection vulnerability in PHPhotoalbum's thumbnails.php, allowing an attacker to extract sensitive information such as user credentials and file contents via UNION-based SQLi.