Full title: Zenphoto 1.4.5.2 Cross Site Scripting / SQL Injection 
Category: web applications
Platform: php
Zenphoto version 1.4.5.2 suffers from cross site scripting and remote SQL injection vulnerabilities.

# 0day.today @ http://0day.today/