Field Assessment
AI analysis pending.
CVE
CVE-2012-0994
Severity
MEDIUM
CVSS
6
EPSS
1.19%
Original Filing — NVD Description
SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote authenticated users to execute arbitrary SQL commands via the sortableList parameter.