Sql injection

Eval injection vulnerability in zp-core/zp-extensions/viewersizeimage.php in ZENphoto 1.4.2, when the viewersizeimage plugin is enabled, allows remote attackers to execute arbitrary PHP code via the viewersizeimagesaved cookie...

PT-2012-2998

Name of the Vulnerable Software and Affected Versions ZENphoto version 1.4.2 Description The issue allows remote attackers to execute arbitrary PHP code via the viewer size image saved cookie when the viewer size image plugin is enabled. This is due to an eval injection vulnerability in the...