PT-2012-2998 · Zenphoto · Zenphoto

Published 2012-02-21 · Updated 2017-08-29 · CVE-2012-0993

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ZENphoto version 1.4.2

Description The issue allows remote attackers to execute arbitrary PHP code via the viewer size image saved cookie when the viewer size image plugin is enabled. This is due to an eval injection vulnerability in the zp-core/zp-extensions/viewer size image.php file.

Recommendations For ZENphoto version 1.4.2, consider disabling the viewer size image plugin until a patch is available to prevent exploitation. Restrict access to the viewer size image.php file to minimize the risk of arbitrary PHP code execution. Avoid using the viewer size image saved cookie in the affected plugin until the issue is resolved.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2012-0993

Affected Products

Zenphoto

References · 9

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2012-02/0037.html · Exploit
• 🔥 http://zenphoto.org/trac/changeset/8994 · Exploit
• 🔥 http://securityfocus.com/bid/51916 · Exploit
• 🔥 http://zenphoto.org/trac/changeset/8995 · Exploit
• 🔥 https://htbridge.ch/advisory/HTB23070 · Exploit
• http://secunia.com/advisories/47875 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0993 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73081 · Note
• http://zenphoto.org/news/zenphoto-1.4.2.1 · Note