CVE-2008-0939

HIGH 7.5CVE-2008-0939 · Published 25/02/2008 · updated 16/06/2026

In short

CVE-2008-0939 is a HIGH (CVSS 7.5) vulnerability affecting photo album plugin (wordpress).
Chance of exploitation in the next 30 days (EPSS): 4.3%, higher than 91.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
photo album plugin wordpress	`= 1.1`	No fix yet

Description

Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album (WPPA) before 1.1 plugin for WordPress allow remote attackers to execute arbitrary SQL commands via (1) the photo parameter to index.php, used by the wppa_photo_name function; or (2) the album parameter to index.php, used by the wppa_album_name function. NOTE: some of these details are obtained from third party information.

References

me.mywebsight.ws/web/wppa
secunia.com/advisories/28988 · Vendor Advisory
securityreason.com/securityalert/3693
weblogtoolscollection.com/archives/2008/02/21/photo-album-plugin-vulnerabilities
securityfocus.com/archive/1/488290 · Exploit
securityfocus.com/bid/27832 · Exploit
vupen.com/english/advisories/2008/0586
exchange.xforce.ibmcloud.com/vulnerabilities/40599
exploit-db.com/exploits/5135

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free