Zenphoto version 1.4.5.2 suffers from cross site scripting and remote SQL injection vulnerabilities…. Zenphoto version 1.4.5.2 suffers from cross site scripting and remote SQL injection vulnerabilities.

Read more http://packetstormsecurity.com/files/123501/SOJOBO-ADV-13-01.txt