Description
SQL injection vulnerability in index.php in Zenphoto 1.2.5, when the ZenPage plugin is enabled, allows remote attackers to execute arbitrary SQL commands via the category parameter, related to a URI under news/category/.
Remediation
References
Related Vulnerabilities
MySQL CVE-2013-1526 Vulnerability (CVE-2013-1526)
WordPress Plugin Custom Dashboard & Login Page-AGCA Multiple Unspecified Vulnerabilities (1.5.4.2)
SharePoint Out-of-bounds Write Vulnerability (CVE-2018-0792)
WordPress Ultimate Member Plugin Other Vulnerability (CVE-2022-3383)
PostgreSQL Improper Input Validation Vulnerability (CVE-2019-10210)