Description

SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the albumnr parameter.

Remediation

References

CVE-2007-6666

Related Vulnerabilities

WordPress Plugin WooCommerce SagePay Direct Payment Gateway Multiple Cross-Site Scripting Vulnerabilities (0.1.6.6)

WordPress Plugin WooCommerce Anti-Fraud Security Bypass (3.2)

WordPress Plugin Map Block for Google Maps Unspecified Vulnerability (1.31)

WordPress Plugin Simple:Press 'sf-header-forum.php' SQL Injection (4.3.0)

Oracle JRE CVE-2013-2449 Vulnerability (CVE-2013-2449)

Severity

High

Classification

CVE-2007-6666 CWE-138

Tags

Missing Update Known Vulnerabilities