PT-2012-2998 · Zenphoto · Zenphoto

Publicado 2012-02-21 · Atualizado 2017-08-29 · CVE-2012-0993

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ZENphoto version 1.4.2

Description The issue allows remote attackers to execute arbitrary PHP code via the viewer size image saved cookie when the viewer size image plugin is enabled. This is due to an eval injection vulnerability in the zp-core/zp-extensions/viewer size image.php file.

Recommendations For ZENphoto version 1.4.2, consider disabling the viewer size image plugin until a patch is available to prevent exploitation. Restrict access to the viewer size image.php file to minimize the risk of arbitrary PHP code execution. Avoid using the viewer size image saved cookie in the affected plugin until the issue is resolved.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2012-0993

Produtos afetados

Zenphoto

Referências · 9

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2012-02/0037.html · Exploit
• 🔥 http://zenphoto.org/trac/changeset/8994 · Exploit
• 🔥 http://securityfocus.com/bid/51916 · Exploit
• 🔥 http://zenphoto.org/trac/changeset/8995 · Exploit
• 🔥 https://htbridge.ch/advisory/HTB23070 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73081 · Nota
• http://secunia.com/advisories/47875 · Aviso do Fabricante
• http://zenphoto.org/news/zenphoto-1.4.2.1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0993 · Nota de Segurança