CVE-2006-2040

MEDIUM · CVSS 6.4 EPSS 3.90%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-04-26 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2006-2040

Severity

MEDIUM

CVSS

6.4

EPSS

3.90%

Original NVD Description

Multiple SQL injection vulnerabilities in photokorn 1.53 and 1.542 allow remote attackers to execute arbitrary SQL commands via the (1) cat, (2) pic and (3) page parameter in index.php; (4) id parameter in postcard.php; and (5) cat parameter in print.php.