Rezultati pretraživanja za 'Proizvođač: zenphoto'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2015-5591 | 6.5 | SQL injection vulnerability in Zenphoto before 1.4.9 allow remote administrators to execute arbitrary SQL commands. | 2020-01-06 20:51:00 | 2019-12-31 21:15:00 |
| CVE-2018-0610 | 6.5 | Local file inclusion vulnerability in Zenphoto 1.4.14 and earlier allows a remote attacker with an administrative privilege to execute arbitrary code or obtain sensitive information. | 2019-10-03 00:03:00 | 2018-06-26 14:29:00 |
| CVE-2018-20140 | 4.3 | Zenphoto 1.4.14 has multiple cross-site scripting (XSS) vulnerabilities via different URL parameters. | 2019-03-21 19:18:00 | 2019-03-21 16:00:00 |
| CVE-2006-2187 | 6.8 | Multiple cross-site scripting (XSS) vulnerabilities in zenphoto 1.0.1 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) a parameter in i.php, and the (2) album and (3) image parameters in index.php. | 2018-10-18 16:38:00 | 2006-05-04 12:38:00 |
| CVE-2006-2186 | 5.0 | zenphoto 1.0.1 beta and earlier allow remote attackers to obtain sensitive information via a direct request for the (1) /photos/themes/default/ and (2) /photos/themes/testing/ URIs, which reveals the path in an error message. | 2018-10-18 16:38:00 | 2006-05-04 12:38:00 |
| CVE-2010-4907 | 4.3 | Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote attackers to inject arbitrary web script or HTML via the user parameter. NOTE: the from parameter is already covered by CVE-2009-4562. | 2018-10-10 20:08:00 | 2011-10-08 10:55:00 |
| CVE-2010-4906 | 7.5 | SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote attackers to execute arbitrary SQL commands via the a parameter. NOTE: some of these details are obtained from third party information. | 2018-10-10 20:08:00 | 2011-10-08 10:55:00 |
| CVE-2007-6666 | 7.5 | SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the albumnr parameter. | 2017-09-29 01:30:00 | 2008-01-04 11:46:00 |
| CVE-2009-4564 | 6.8 | SQL injection vulnerability in index.php in Zenphoto 1.2.5, when the ZenPage plugin is enabled, allows remote attackers to execute arbitrary SQL commands via the category parameter, related to a URI under news/category/. | 2017-09-19 01:29:00 | 2010-01-04 21:30:00 |
| CVE-2009-4563 | 4.3 | Cross-site request forgery (CSRF) vulnerability in zp-core/admin-options.php in Zenphoto 1.2.5 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via the 0-adminpass and 0-admin | 2017-09-19 01:29:00 | 2010-01-04 21:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/4
Zapisa po stranici: