[SECURITY] [DSA 989-1] New zoph packages fix SQL injection

-------------------------------------------------------------------------- Debian Security Advisory DSA 989-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 9th, 2006 http://www.debian.org/security/faq -...

CVE-2006-0402

SQL injection vulnerability in Zoph before 0.5pre1 allows remote attackers to execute arbitrary SQL commands...

CVE-2006-0402

CVE-2006-0402 affects Zoph, a web-based photo management system. The vulnerability is an SQL injection caused by insufficient input sanitisation in photo search queries, exploitable remotely. Debian fixed in version 0.3.3-12sarge1 (stable/sarge) and 0.5-1 (unstable/sid); other distributions refer...

CVE-2006-0402

SQL injection vulnerability in Zoph before 0.5pre1 allows remote attackers to execute arbitrary SQL commands...