Description
Local file inclusion vulnerability in Zenphoto 1.4.14 and earlier allows a remote attacker with an administrative privilege to execute arbitrary code or obtain sensitive information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zenphoto | Zenphoto | 1.4.14 and earlier | — |
References
- https://www.zenphoto.org/news/zenphoto-1.5
- JVN#33124193 third-party-advisory