https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T11:42:00.455494+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-96673 CVE-2026-96673 — Photoview through 2.4.0 SQL Injection via album download route 2026-09-28T11:42:00.457991+00:00

Affected: Photoview

Photoview through 2.4.0 contains an SQL injection vulnerability in the album download route that allows unauthenticated attackers to inject SQL by manipulating the album_id path segment. Attackers can supply crafted SQL expressions in the album_id parameter to extract arbitrary data from the database using time-based or blind injection techniques.