CVE-2010-4906

SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote attackers to execute arbitrary SQL commands via the a parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4906

CVE-2010-4906 concerns SQL injection in Zenphoto before and including 1.3.1.2 via zp-core/full-image.php when processing the parameter a. Affected product: Zenphoto 1.3 and 1.3.1.2. Root cause: unsafely constructed SQL in the mentioned script enables remote attackers to execute arbitrary SQL comm...