Description

Eval injection vulnerability in zp-core/zp-extensions/viewer_size_image.php in ZENphoto 1.4.2, when the viewer_size_image plugin is enabled, allows remote attackers to execute arbitrary PHP code via the viewer_size_image_saved cookie.

Remediation

References

CVE-2012-0993

Related Vulnerabilities

WordPress Plugin Translate WordPress-Google Language Translator Cross-Site Scripting (6.0.9)

MediaWiki CVE-2017-8812 Vulnerability (CVE-2017-8812)

WordPress Plugin GD bbPress Attachments Cross-Site Scripting (2.5)

MySQL CVE-2021-35627 Vulnerability (CVE-2021-35627)

Lighttpd Other Vulnerability (CVE-2007-3947)

Severity

Medium

Classification

CVE-2012-0993 CWE-94

Tags

Missing Update Known Vulnerabilities