Zenphoto version 1.1.3 remote SQL injection exploit that makes use of rss.php.
ebea914d89753aa5cf99f22da03cc2a7cef941eb3aefb589e889de51b5c379ea
ZenPhoto version 1.2.5 blind SQL injection exploit.
bf0946dfc31faab77398bc2efe0fe0cccef59b2f0242782e01d32ee6637a7faf