EUVD-2012-1017

Malware in sbrugna...

CVE-2012-0994

SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote authenticated users to execute arbitrary SQL commands via the sortableList parameter...

Sql injection

SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote authenticated users to execute arbitrary SQL commands via the sortableList parameter...

PT-2012-2999

Name of the Vulnerable Software and Affected Versions ZENphoto version 1.4.2 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the sortableList parameter in the Manage Albums feature, specifically in the zp-core/admin-albumsort.php fil...

CVE-2012-0994: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote authenticated users to execute arbitrary SQL commands via the sortableList parameter...

CVE-2012-0994

SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote authenticated users to execute arbitrary SQL commands via the sortableList parameter...