Debian/zoph: unknown

SQL injection vulnerability in Zoph before 0.7.0.1 might allow remote attackers to execute arbitrary SQL commands via the _order parameter to (1) photos.php and (2) edit_photos.php.

Action: Upgrade zoph to 0.7.0.2-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-3905
• https://security-tracker.debian.org/tracker/CVE-2007-3905

published 2007-07-19T17:30:00Z · modified 2026-10-21T17:47:37.478880956Z · JSON