ByteOS Network

NVD Vulnerability Details :

CVE-2013-7242

Deferred

Source-cve@mitre.org

Published At-31 Dec, 2013 | 15:16

Updated At-11 Apr, 2025 | 00:51

SQL injection vulnerability in zp-core/zp-extensions/wordpress_import.php in Zenphoto before 1.4.5.4 allows remote authenticated administrators to execute arbitrary SQL commands via the tableprefix parameter.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P

CPE Matches

zenphoto>>zenphoto>>Versions up to 1.4.5.3(inclusive)

cpe:2.3:a:zenphoto:zenphoto:*:*:*:*:*:*:*:*

zenphoto>>zenphoto>>1.4.5

cpe:2.3:a:zenphoto:zenphoto:1.4.5:*:*:*:*:*:*:*

zenphoto>>zenphoto>>1.4.5.1

cpe:2.3:a:zenphoto:zenphoto:1.4.5.1:*:*:*:*:*:*:*

zenphoto>>zenphoto>>1.4.5.2

cpe:2.3:a:zenphoto:zenphoto:1.4.5.2:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-89	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://openwall.com/lists/oss-security/2013/12/29/1	cve@mitre.org	Exploit
http://openwall.com/lists/oss-security/2013/12/30/10	cve@mitre.org	N/A
http://seclists.org/bugtraq/2013/Oct/20	cve@mitre.org	Exploit
http://www.enkomio.com/Advisory/SOJOBO-ADV-13-01	cve@mitre.org	URL Repurposed
http://www.securityfocus.com/bid/62815	cve@mitre.org	N/A
http://www.zenphoto.org/news/zenphoto-1.4.5.4	cve@mitre.org	Vendor Advisory
http://openwall.com/lists/oss-security/2013/12/29/1	af854a3a-2127-422b-91ae-364da2661108	Exploit
http://openwall.com/lists/oss-security/2013/12/30/10	af854a3a-2127-422b-91ae-364da2661108	N/A
http://seclists.org/bugtraq/2013/Oct/20	af854a3a-2127-422b-91ae-364da2661108	Exploit
http://www.enkomio.com/Advisory/SOJOBO-ADV-13-01	af854a3a-2127-422b-91ae-364da2661108	URL Repurposed
http://www.securityfocus.com/bid/62815	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.zenphoto.org/news/zenphoto-1.4.5.4	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History