Description

Eval injection vulnerability in zp-core/zp-extensions/viewer_size_image.php in ZENphoto 1.4.2, when the viewer_size_image plugin is enabled, allows remote attackers to execute arbitrary PHP code via the viewer_size_image_saved cookie.

Remediation

References

CVE-2012-0993

Related Vulnerabilities

WordPress Plugin Media Library Assistant PHP Object Injection (2.60)

WordPress Plugin Custom Field Suite Cross-Site Scripting (2.5.14)

WordPress Plugin Content text slider on post Cross-Site Scripting (6.8)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4531)

Python Divide By Zero Vulnerability (CVE-2017-18207)

Severity

Medium

Classification

CVE-2012-0993 CWE-94

Tags

Missing Update Known Vulnerabilities