Skip to content
OpenAdvisories

Vendor

Photoview

2 known vulnerabilities.

Products

Photoview 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-96673

    Photoview through 2.4.0 SQL Injection via album download route

    Photoview through 2.4.0 contains an SQL injection vulnerability in the album download route that allows unauthenticated attackers to inject SQL by manipulating the album_id path segment. Attackers can supply crafted SQL expressions in the album_id parameter t…

    Photoview Photoview
  • High 7.1
    CVE-2026-96271

    Photoview through 2.4.0 Authorization Bypass via shareAlbum

    Photoview through 2.4.0 contains an authorization bypass vulnerability in the shareAlbum GraphQL mutation that allows authenticated users to create share links for albums owned by other users. Attackers can supply arbitrary album IDs to generate working share…

    Photoview Photoview