Security Advisory

CVE-2007-3905

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-07-19 17:00:00
Last updated 2024-08-07 14:37:05
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

SQL injection vulnerability in Zoph before 0.7.0.1 might allow remote attackers to execute arbitrary SQL commands via the _order parameter to (1) photos.php and (2) edit_photos.php.