CVE-2009-4566
Zenphoto 1.2.5 - SQL Injection
Title source: llmDescription
SQL injection vulnerability in index.php in Zenphoto 1.2.5 allows remote attackers to execute arbitrary SQL commands via the title parameter in a news action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by petros · javascriptwebappsphp
https://www.exploit-db.com/exploits/9154
Scores
EPSS
0.0019
EPSS Percentile
40.8%
Details
CWE
CWE-89
Status
published
Products (1)
zenphoto/zenphoto
1.2.5
Published
Jan 04, 2010
Tracked Since
Feb 18, 2026