Description
Eval injection vulnerability in zp-core/zp-extensions/viewer_size_image.php in ZENphoto 1.4.2, when the viewer_size_image plugin is enabled, allows remote attackers to execute arbitrary PHP code via the viewer_size_image_saved cookie.
Remediation
References
Related Vulnerabilities
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1158)
WordPress Plugin CF7 Invisible reCAPTCHA Cross-Site Request Forgery (1.3.3)
WordPress Plugin WooCommerce Cross-Site Request Forgery (3.6.4)
Django Improper Access Control Vulnerability (CVE-2016-2048)
WordPress Plugin SupportFlow Multiple Cross-Site Scripting Vulnerabilities (0.6)