Description

SQL injection vulnerability in zp-core/zp-extensions/wordpress_import.php in Zenphoto before 1.4.5.4 allows remote authenticated administrators to execute arbitrary SQL commands via the tableprefix parameter.

Remediation

References

CVE-2013-7242

Related Vulnerabilities

Oracle Database Server CVE-2008-0345 Vulnerability (CVE-2008-0345)

WordPress Plugin WPCafe-Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce Cross-Site Scripting (2.2.24)

DWR Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-5326)

Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8264)

PHP Other Vulnerability (CVE-2014-8142)

Severity

Medium

Classification

CVE-2013-7242 CWE-138

Tags

Missing Update Known Vulnerabilities