Description

SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the albumnr parameter.

Remediation

References

CVE-2007-6666

Related Vulnerabilities

Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3271)

MediaWiki CVE-2022-28205 Vulnerability (CVE-2022-28205)

WordPress Plugin Passster-Password Protection Weak Encoding (3.5.5.5.1)

Opencart Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-36694)

WordPress Plugin WP HTML Sitemap Cross-Site Request Forgery (1.2)

Severity

High

Tags

Missing Update Known Vulnerabilities CWE-138 CVE-2007-6666