CVE:CVE-2007-3905
CNNVD:CNNVD-200707-369
Zoph 0.7.0.1版本之前的版本中存在SQL注入漏洞。远程攻击者可以借助对(1)photos.php和(2)edit_photos.php的参数，执行任意SQL指令。
solution:Upgrade zoph zoph to a higher version than 0.7,and avoid the version (,0.7]