CVE-2014-9236

Mô tả

Tham khảo

• packetstormsecurity.com/files/129141/Zoph-0.9.1-Cross-Site-Scripting-SQL-Injection.html · Exploit
• seclists.org/fulldisclosure/2014/Nov/45 · Exploit

Lỗ hổng khác của zoph

• CVE-2014-9235TRUNG BÌNH 6.5Multiple SQL injection vulnerabilities in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier allow remote authenticated users to execute arb…
• CVE-2009-2343TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in people.php in Zoph before 0.7.0.6 allows remote attackers to inject arbitrary web script or HTML…
• CVE-2008-6838TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in search.php in Zoph 0.7.2.1 allows remote attackers to inject arbitrary web script or HTML via th…
• CVE-2008-6837CAO 7.5SQL injection vulnerability in Zoph 0.7.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different i…
• CVE-2008-3258CAO 7.5Multiple SQL injection vulnerabilities in Zoph before 0.7.0.5 allow remote attackers to execute arbitrary SQL commands via unspecified vecto…