Description

SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote attackers to execute arbitrary SQL commands via the a parameter. NOTE: some of these details are obtained from third party information.

Remediation

References

CVE-2010-4906

Related Vulnerabilities

WordPress Plugin JobSearch WP Job Board Security Bypass (1.8.1)

MySQL CVE-2018-2600 Vulnerability (CVE-2018-2600)

MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-5278)

WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.7)

Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-27491)

Severity

High

Classification

CVE-2010-4906 CWE-138

Tags

Missing Update Known Vulnerabilities