Debian Security Advisory DSA 989-1 (zoph)

The remote host is missing an update to zoph announced via advisory DSA 989-1. Neil McBride discovered that Zoph, a web based photo management system performs insufficient sanitising for input passed to photo searches, which may lead to the execution of SQL commands through a SQL injection attack...