CVE-2013-7242

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.84%

Published

Dec 31, 2013

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SQL injection vulnerability in zp-core/zp-extensions/wordpress_import.php in Zenphoto before 1.4.5.4 allows remote authenticated administrators to execute arbitrary SQL commands via the tableprefix parameter.

Weaknesses (CWE)

CWE-89

Affected Products (4)

zenphoto · zenphotovulnerable

References (12)

http://openwall.com/lists/oss-security/2013/12/29/1

Exploit

http://openwall.com/lists/oss-security/2013/12/30/10

http://seclists.org/bugtraq/2013/Oct/20

Exploit

http://www.enkomio.com/Advisory/SOJOBO-ADV-13-01

URL Repurposed

http://www.securityfocus.com/bid/62815

http://www.zenphoto.org/news/zenphoto-1.4.5.4

Vendor Advisory

http://openwall.com/lists/oss-security/2013/12/29/1

Exploit

http://openwall.com/lists/oss-security/2013/12/30/10

http://seclists.org/bugtraq/2013/Oct/20

Exploit

http://www.enkomio.com/Advisory/SOJOBO-ADV-13-01

URL Repurposed

http://www.securityfocus.com/bid/62815

http://www.zenphoto.org/news/zenphoto-1.4.5.4

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs