Unscored CVE-2020-5593 EUVD-2020-26754GHSA-442x-gw2x-3rxf

Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .…

Published Jun 11, 2020 · Updated Aug 4, 2024 · Assigned by jpcert

Description

Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file.

Vendor	Product	Affected	Fixed
Zenphoto	Zenphoto	versions prior to 1.5.7	—