VULNERABILITY INTELLIGENCE

CVE-2012-0993

CVSS score6.8 MEDIUM

EPSS probability2.46%

CISA KEVNot currently listed

Published2012-02-21

Last modified2026-06-16

Description

Eval injection vulnerability in zp-core/zp-extensions/viewer_size_image.php in ZENphoto 1.4.2, when the viewer_size_image plugin is enabled, allows remote attackers to execute arbitrary PHP code via the viewer_size_image_saved cookie.