CVE-2013-7242

SQL injection vulnerability in zp-core/zp-extensions/wordpressimport.php in Zenphoto before 1.4.5.4 allows remote authenticated administrators to execute arbitrary SQL commands via the tableprefix parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the export function in zp-core/zp-extensions/mergedRSS.php in Zenphoto before 1.4.5.4 allows remote attackers to inject arbitrary web script or HTML via the URI...

Sql injection

SQL injection vulnerability in zp-core/zp-extensions/wordpressimport.php in Zenphoto before 1.4.5.4 allows remote authenticated administrators to execute arbitrary SQL commands via the tableprefix parameter...

CVE-2013-7242

SQL injection vulnerability in zp-core/zp-extensions/wordpressimport.php in Zenphoto before 1.4.5.4 allows remote authenticated administrators to execute arbitrary SQL commands via the tableprefix parameter...

CVE-2013-7242

Zenphoto contains an SQL injection in zp-core/zp-extensions/wordpress_import.php, exploitable via the tableprefix parameter. The vulnerability affects Zenphoto

CVE-2013-7241

Cross-site scripting XSS vulnerability in the export function in zp-core/zp-extensions/mergedRSS.php in Zenphoto before 1.4.5.4 allows remote attackers to inject arbitrary web script or HTML via the URI...

CVE-2013-7241

Zenphoto contains an XSS vulnerability in the export function (zp-core/zp-extensions/mergedRSS.php) that allows remote attackers to inject arbitrary web script or HTML via the URI. Affected versions are Zenphoto prior to 1.4.5.4; the fix is to upgrade to 1.4.5.4 or later. The relevant evidence co...

PT-2013-6301 · Zenphoto · Zenphoto

Name of the Vulnerable Software and Affected Versions: Zenphoto versions prior to 1.4.5.4 Description: The issue is related to a cross-site scripting XSS vulnerability in the export function. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the URI...

PT-2013-6302 · Zenphoto · Zenphoto

Name of the Vulnerable Software and Affected Versions: Zenphoto versions prior to 1.4.5.4 Description: The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved via the tableprefix parameter in the wordpress import.php file within the...

[SOJOBO-ADV-13-01] - Zenphoto 1.4.5.2 multiple vulnerabilities

SOJOBO-ADV-13-01 - Zenphoto 1.4.5.2 multiple vulnerabilities I. Information ================== Name : Zenphoto 1.4.5.2 multiple vulnerabilities Software : Zenphoto 1.4.5.2 and possibly below. Vendor Homepage : http://www.zenphoto.org/ Vulnerability Type : SQL Injection, Reflected Cross-Site...

ZenPhoto Cross Site Scripting and SQL Injection Vulnerabilities

Binary data 8019.prm...

Zenphoto 1.4.5.2 Cross Site Scripting / SQL Injection

Zenphoto version 1.4.5.2 suffers from cross site scripting and remote SQL injection vulnerabilities. SOJOBO-ADV-13-01 - Zenphoto 1.4.5.2 multiple vulnerabilities I. Information ================== Name : Zenphoto 1.4.5.2 multiple vulnerabilities Software : Zenphoto 1.4.5.2 and possibly below. Vend...

Zenphoto 1.4.5.2 Cross Site Scripting / SQL Injection

SOJOBO-ADV-13-01 - Zenphoto 1.4.5.2 multiple vulnerabilities I. Information ================== Name : Zenphoto 1.4.5.2 multiple vulnerabilities Software : Zenphoto 1.4.5.2 and possibly below. Vendor Homepage : http://www.zenphoto.org/ Vulnerability Type : SQL Injection, Reflected Cross-Site...

Zenphoto 1.4.4.1 Blind SQL Injection

Exploit Title : Zenphoto ver 1.4.4.1 Blind SQL Injection Author : HosseinNsn Home : http://Emperor-Team.Org Software Link : http://www.zenphoto.org Security Risk : High Version : 1.4.4.1 Tested on : Linux - Windows Google Dork : "Powered by Zenphoto" Exploit :...

ZenPhoto - index.php SQL Injection

ZenPhoto - index.php SQL Injection source: https://www.securityfocus.com/bid/58078/info Zenphoto is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

ZenPhoto - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/58078/info Zenphoto is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

Zenphoto Verisign_logon.php redirect Parameter XSS

The version of Zenphoto installed on the remote host is affected by a cross-site scripting vulnerability because it fails to properly sanitize user input to the 'redirect' parameter of the 'zp-core/zp-extensions/federatedlogon/Verisignlogon.php' script. An attacker may be able to leverage this...

ZenPhoto 1.4.3.3 - Multiple Vulnerabilities

ZenPhoto 1.4.3.3 - Multiple Vulnerabilities waraxe-2012-SA096 - Multiple Vulnerabilities in Zenphoto 1.4.3.3 =============================================================================== Author: Janek Vind "waraxe" Date: 03. November 2012 Location: Estonia, Tartu Web:...

ZenPhoto 1.4.3.3 - Multiple Vulnerabilities

waraxe-2012-SA096 - Multiple Vulnerabilities in Zenphoto 1.4.3.3 =============================================================================== Author: Janek Vind "waraxe" Date: 03. November 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-96.html Description of vulnerable...

Zenphoto 1.4.3.3 SQL Injection / Interface Exposure / XSS

waraxe-2012-SA096 - Multiple Vulnerabilities in Zenphoto 1.4.3.3 =============================================================================== Author: Janek Vind "waraxe" Date: 03. November 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-96.html Description of vulnerable...