CVE-2009-4566

SQL injection vulnerability in index.php in Zenphoto 1.2.5 allows remote attackers to execute arbitrary SQL commands via the title parameter in a news action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in index.php in Zenphoto 1.2.5 allows remote attackers to execute arbitrary SQL commands via the title parameter in a news action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in index.php in Zenphoto 1.2.5, when the ZenPage plugin is enabled, allows remote attackers to execute arbitrary SQL commands via the category parameter, related to a URI under news/category/...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in zp-core/admin-options.php in Zenphoto 1.2.5 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via the 0-adminpass and 0-adminpass2 parameters in a saveoptions action...

CVE-2009-4562

Cross-site scripting XSS vulnerability in zp-core/admin.php in Zenphoto 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the from parameter...

CVE-2009-4563

Cross-site request forgery CSRF vulnerability in zp-core/admin-options.php in Zenphoto 1.2.5 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via the 0-adminpass and 0-adminpass2 parameters in a saveoptions action...

CVE-2009-4562

CVE-2009-4562 is an XSS vulnerability in Zenphoto 1.2.5, specifically in zp-core/admin.php, allowing remote attackers to inject arbitrary web script or HTML via the from parameter. The connected documents corroborate the same flaw in Zenphoto 1.2.5 and note related variants (e.g., CVE-2010-4907 d...

CVE-2009-4564

Zenphoto 1.2.5 (with the ZenPage plugin enabled) is affected by an SQL injection in index.php via the category parameter in the news/category/ URI. This allows remote attackers to run arbitrary SQL commands against the application's database. The vulnerability arises from improper handling of the...

ZenPhoto 1.2.5 Completely Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================== ZenPhoto 1.2.5 Completely Blind SQL Injection Exploit ===================================================== / ZenPhoto 1.2.5 Completly Blind SQL Injection Exploit Requirements:...