3 matches found
CVE-2013-7242
SQL injection vulnerability in zp-core/zp-extensions/wordpressimport.php in Zenphoto before 1.4.5.4 allows remote authenticated administrators to execute arbitrary SQL commands via the tableprefix parameter...
6.5CVSS0.01843EPSS
SaveExploits2References6
CVE-2012-0993
Eval injection vulnerability in zp-core/zp-extensions/viewersizeimage.php in ZENphoto 1.4.2, when the viewersizeimage plugin is enabled, allows remote attackers to execute arbitrary PHP code via the viewersizeimagesaved cookie...
6.8CVSS7.6AI score0.02461EPSS
SaveExploits3References8
CVE-2012-0993
Eval injection vulnerability in zp-core/zp-extensions/viewersizeimage.php in ZENphoto 1.4.2, when the viewersizeimage plugin is enabled, allows remote attackers to execute arbitrary PHP code via the viewersizeimagesaved cookie...
7.6AI score0.02461EPSS
SaveExploits3References8
20