Skip to content

Zenphoto · weakness class

SQL Injection

7 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

  1. SQL injection vulnerability in Zenphoto before 1.4.9 allow remote administrators to execute arbitrary SQL commands.CVE-2015-5591Zenphoto · 2.2% likely

    CWE-89

  2. SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the albumnr parameter.CVE-2007-6666Zenphoto · 2.0% likely

    CWE-89

  3. SQL injection vulnerability in zp-core/zp-extensions/wordpress_import.php in Zenphoto before 1.4.5.4 allows remote authenticated administrators to execute arbitrary SQL commands v…CVE-2013-7242Zenphoto · 1.8% likely

    CWE-89

  4. SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote authenticated users to execute arbitrary SQL commands via t…CVE-2012-0994Zenphoto · 1.1% likely

    CWE-89

  5. SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote attackers to execute arbitrary SQL commands via the a parameter. NOTE: some of thes…CVE-2010-4906Zenphoto · 1.1% likely

    CWE-89

  6. SQL injection vulnerability in index.php in Zenphoto 1.2.5 allows remote attackers to execute arbitrary SQL commands via the title parameter in a news action. NOTE: the provenance…CVE-2009-4566Zenphoto · 1.0% likely

    CWE-89

  7. SQL injection vulnerability in index.php in Zenphoto 1.2.5, when the ZenPage plugin is enabled, allows remote attackers to execute arbitrary SQL commands via the category paramete…CVE-2009-4564Zenphoto · 0.8% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.