Zenphoto zenphoto 1.2.5
Approved changes feed: RSS · Atom
cpe:2.3:a:zenphoto:zenphoto:1.2.5:*:*:*:*:*:*:*part: a version: 1.2.5 update: *
| Vendor | Zenphoto (859b8efc-6d23-5400-8c01-ce7189f6c36e) |
|---|---|
| Product | Zenphoto (4c9926f9-9a05-51a6-8cf6-6aab53a4e8bc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-2641 |
vulnerable | 2026-06-08 05:02:05.118180 |
Details available
Cross-site scripting (XSS) vulnerability in Zenphoto before 1.4.3 allows remote attackers to inject arbitrary web script or HTML by triggering improper interaction with an unspecified library.
Published: 2012-07-05T17:00:00.000Z
Updated: 2024-09-16T19:25:21.286Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4566 |
vulnerable | 2026-06-08 04:51:48.938515 |
Details available
SQL injection vulnerability in index.php in Zenphoto 1.2.5 allows remote attackers to execute arbitrary SQL commands via the title parameter in a news action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2010-01-04T21:00:00.000Z
Updated: 2024-08-07T07:08:37.978Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4564 |
vulnerable | 2026-06-08 04:51:48.905120 |
Details available
SQL injection vulnerability in index.php in Zenphoto 1.2.5, when the ZenPage plugin is enabled, allows remote attackers to execute arbitrary SQL commands via the category parameter, related to a URI under news/category/.
Published: 2010-01-04T21:00:00.000Z
Updated: 2024-08-07T07:08:38.264Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4563 |
vulnerable | 2026-06-08 04:51:48.904607 |
Details available
Cross-site request forgery (CSRF) vulnerability in zp-core/admin-options.php in Zenphoto 1.2.5 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via the 0-adminpass and 0-adminpass_2 parameters in a saveoptions action.
Published: 2010-01-04T21:00:00.000Z
Updated: 2024-08-07T07:08:37.993Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4562 |
vulnerable | 2026-06-08 04:51:48.904206 |
Details available
Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the from parameter.
Published: 2010-01-04T21:00:00.000Z
Updated: 2024-08-07T07:08:38.084Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.