CVE-2006-2912

CVE-2006-2912 describes multiple SQL injection vulnerabilities in SelectaPix 1.31, allowing remote attackers to execute arbitrary SQL commands. Specifically, these flaws exist in the albumID parameter of view_album.php and index.php, the imageID parameter of popup.php, and the username and password parameters of admin/member.php. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low attack complexity and no authentication required, potentially leading to compromise of confidentiality, integrity, and availability. While the EPSS score is low and there is no evidence of active exploitation, public exploit code, or significant community discussion, the fundamental risk remains due to the nature of SQL injection.