NVD

Id
41980  
Name
CVE-2013-7242  
Description
SQL injection vulnerability in zp-core/zp-extensions/wordpress_import.php in Zenphoto before 1.4.5.4 allows remote authenticated administrators to execute arbitrary SQL commands via the tableprefix parameter.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-12-31  
Modified Date
2016-12-30  
Seq
2013-7242  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
211877 41980 CVE-2013-7242 [oss-security] 20131230 CVE request: Zenphoto 1.4.5.4  View
211878 41980 CVE-2013-7242 [oss-security] 20131230 Re: CVE request: Zenphoto 1.4.5.4  View
211879 41980 CVE-2013-7242 20131003 [SOJOBO-ADV-13-01] - Zenphoto 1.4.5.2 multiple vulnerabilities  View
211880 41980 CVE-2013-7242 http://www.enkomio.com/Advisory/SOJOBO-ADV-13-01  View
211881 41980 CVE-2013-7242 62815  View
211882 41980 CVE-2013-7242 http://www.zenphoto.org/news/zenphoto-1.4.5.4  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24177 JVNDB-2013-005752 Zenphoto の zp-core/zp-extensions/wordpress_import.php における SQL インジェクションの脆弱性 Zenphoto の zp-core/zp-extensions/wordpress_import.php には、SQL インジェクションの脆弱性が存在します。 CVE-2013-7242 67184 CVE-2013-7242 41980 6.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005752.html 2013-10-01 2014-01-07 View