← Database

CVE-2007-6666

HIGH CVSS: 7.5 Published: 2008-01-04 Modified: 2026-06-16

Description

SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the albumnr parameter.

Affected Platforms

Zenphoto Zenphoto

Weakness Type

CWE-89

References