CVE:CVE-2008-3258
CNNVD:CNNVD-200807-362
Zoph(Zoph Organizes Photos)一个基于web的照片展示与管理系统。
Zoph 0.7.0.5之前的版本存在多个SQL注入漏洞。远程攻击者通过未明漏洞执行任意ＳＱＬ命令。
solution:Upgrade zoph zoph to a higher version than 0.3.3,0.4,0.5,0.5.1,0.6,0.7,0.7.0.1,0.7.0.2,0.7.0.3,0.7.0.4,and avoid the version 0.3.3,0.4,0.5,0.5.1,0.6,0.7,0.7.0.1,0.7.0.2,0.7.0.3,0.7.0.4