CVE-2012-0994

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.19%

Published

Feb 21, 2012

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote authenticated users to execute arbitrary SQL commands via the sortableList parameter.

Weaknesses (CWE)

CWE-89

Affected Products (1)

zenphoto · zenphotovulnerable

References (16)

http://archives.neohapsis.com/archives/bugtraq/2012-02/0037.html

Exploit

http://secunia.com/advisories/47875

Vendor Advisory

http://www.securityfocus.com/bid/51916

Exploit

http://www.zenphoto.org/news/zenphoto-1.4.2.1

http://www.zenphoto.org/trac/changeset/8994

ExploitPatch

http://www.zenphoto.org/trac/changeset/8995

ExploitPatch

https://exchange.xforce.ibmcloud.com/vulnerabilities/73082

https://www.htbridge.ch/advisory/HTB23070

Exploit

http://archives.neohapsis.com/archives/bugtraq/2012-02/0037.html

Exploit

http://secunia.com/advisories/47875

Vendor Advisory

http://www.securityfocus.com/bid/51916

Exploit

http://www.zenphoto.org/news/zenphoto-1.4.2.1

http://www.zenphoto.org/trac/changeset/8994

ExploitPatch

http://www.zenphoto.org/trac/changeset/8995

ExploitPatch

https://exchange.xforce.ibmcloud.com/vulnerabilities/73082

https://www.htbridge.ch/advisory/HTB23070

Exploit

KEV Catalog EPSS Scores Vendors All CVEs