Debian DSA-1389-2 : zoph - missing input sanitising

It was discovered that zoph, a web-based photo management system, performs insufficient input sanitising, which allows SQL injection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-1389...

CVE-2007-3905

CVE-2007-3905 concerns the web-based photo management system zoph , where the vulnerability arises from insufficient input sanitising that permits SQL injection. Debian and OpenVAS advisories (DSA-1389-1/2) confirm a remote SQL injection flaw in zoph, with fixed releases including 0.3.3-12sarge3 ...

CVE-2006-3905

Affected software: Webland MyBloggie 2.1.3. Vulnerability: SQL injection allowing remote attackers to execute arbitrary SQL commands via (1) the post_id parameter in index.php and (2) the search functionality. Root cause: unsafely constructed SQL queries exposed to user-controlled inputs. Impact:...

CVE-2022-3905

CVE-2022-3905 is rejected/not used and does not represent an active vulnerability entry.

CVE-2022-3905

...