CVE-2026-96673 in Photoview
Resumen
por MITRE • 2026-09-23
Photoview through 2.4.0 contains an SQL injection vulnerability in the album download route that allows unauthenticated attackers to inject SQL by manipulating the album_id path segment. Attackers can supply crafted SQL expressions in the album_id parameter to extract arbitrary data from the database using time-based or blind injection techniques.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.