Vulnerabilities

TI-2014-07497 CVE-2014-9236 · GHSA-247w-9prv-x7gm

Cross-site scripting (XSS) vulnerability in php/edit_photos.php in Zoph (aka Zoph…

LOW 25

Cross-site scripting (XSS) vulnerability in php/edit_photos.php in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) photographer_id or (2) _cru…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02645 Published 2014-12-03 No fix listed CWE-79

TI-2014-07496 CVE-2014-9235 · GHSA-3mrr-pqw6-73rq

Multiple SQL injection vulnerabilities in Zoph (aka Zoph Organizes Photos) 0.9.1 and…

LOW 33

Multiple SQL injection vulnerabilities in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) _action parameter to group.php or (2) user.php o…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02002 Published 2014-12-03 No fix listed CWE-89

TI-2009-02234 CVE-2009-2343 · GHSA-6w27-694r-crm4

Cross-site scripting (XSS) vulnerability in people.php in Zoph before 0.7.0.6 allows…

LOW 22

Cross-site scripting (XSS) vulnerability in people.php in Zoph before 0.7.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01089 Published 2009-07-07 No fix listed CWE-79

TI-2008-06526 CVE-2008-6838 · GHSA-7q3h-vpf2-j85w

Cross-site scripting (XSS) vulnerability in search.php in Zoph 0.7.2.1 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in search.php in Zoph 0.7.2.1 allows remote attackers to inject arbitrary web script or HTML via the _off parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0175 Published 2009-06-27 No fix listed CWE-79

TI-2008-06525 CVE-2008-6837 · GHSA-g67w-cmqc-xp9h

SQL injection vulnerability in Zoph 0.7.2.1 allows remote attackers to execute arbitrary…

LOW 37

SQL injection vulnerability in Zoph 0.7.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different issue than CVE-2008-3258.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02372 Published 2009-06-27 No fix listed CWE-89

TI-2008-03120 CVE-2008-3258 · GHSA-57w3-7wwx-wp77

Multiple SQL injection vulnerabilities in Zoph before 0.7.0.5 allow remote attackers to…

LOW 37

Multiple SQL injection vulnerabilities in Zoph before 0.7.0.5 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01859 Published 2008-07-22 No fix listed CWE-89

TI-2007-03783 CVE-2007-3905 · GHSA-c4g9-gqcc-w8q5

SQL injection vulnerability in Zoph before 0.7.0.1 might allow remote attackers to…

LOW 35

SQL injection vulnerability in Zoph before 0.7.0.1 might allow remote attackers to execute arbitrary SQL commands via the _order parameter to (1) photos.php and (2) edit_photos.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01286 Published 2007-07-19 No fix listed