CVE-2012-0994

概要

参考情報

• archives.neohapsis.com/archives/bugtraq/2012-02/0037.html · Exploit
• secunia.com/advisories/47875 · Vendor Advisory
• securityfocus.com/bid/51916 · Exploit
• zenphoto.org/news/zenphoto-1.4.2.1
• zenphoto.org/trac/changeset/8994 · Exploit
• zenphoto.org/trac/changeset/8995 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/73082
• htbridge.ch/advisory/HTB23070 · Exploit

zenphoto のその他の脆弱性

• CVE-2023-53916中 4.6Zenphoto 1.6 contains a stored cross-site scripting vulnerability in the user postal code field accessible through the admin-users.php inter…
• CVE-2023-53915中 4.6Zenphoto 1.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by inserti…
• CVE-2022-44449中 4.8Stored cross-site scripting vulnerability in Zenphoto versions prior to 1.6 allows remote a remote authenticated attacker with an administra…
• CVE-2020-36079高 7.2Zenphoto through 1.5.7 is affected by authenticated arbitrary file upload, leading to remote code execution. The attacker must navigate to t…
• CVE-2020-5593高 8.8Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .z…