Description

SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the albumnr parameter.

Remediation

References

CVE-2007-6666

Related Vulnerabilities

WordPress Plugin Recently Multiple Vulnerabilities (3.0.4)

Plone CMS Improper Input Validation Vulnerability (CVE-2013-4195)

WordPress Plugin Elementor Addon Elements Multiple Cross-Site Scripting Vulnerabilities (1.11.1)

WordPress Plugin PDF Flipbook, 3D Flipbook WordPress-DearFlip Unspecified Vulnerability (1.7.12)

Apache HTTP Server Other Vulnerability (CVE-2004-0942)

Severity

High

Classification

CVE-2007-6666 CWE-138

Tags

Missing Update Known Vulnerabilities