VULNERABILITY INTELLIGENCE

CVE-2008-2629

CVSS score7.5 HIGH

EPSS probability2.06%

CISA KEVNot currently listed

Published2008-06-10

Last modified2026-06-16

Description

SQL injection vulnerability in the LifeType (formerly pLog) module for Drupal allows remote attackers to execute arbitrary SQL commands via the albumId parameter in a ViewAlbum action to index.php.