Description

SQL injection vulnerability in zp-core/zp-extensions/wordpress_import.php in Zenphoto before 1.4.5.4 allows remote authenticated administrators to execute arbitrary SQL commands via the tableprefix parameter.

Remediation

References

CVE-2013-7242

Related Vulnerabilities

MongoDb CVE-2024-7553 Vulnerability (CVE-2024-7553)

WordPress Plugin WordPress Robots.txt optimization (+ XML Sitemap)-Website traffic, SEO & ranking Booster Security Bypass (1.4.3)

ATutor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-11446)

Atlassian Jira Improper Authentication Vulnerability (CVE-2021-41312)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-6104)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-138 CVE-2013-7242