CVE-2018-0610

Local file inclusion vulnerability in Zenphoto 1.4.14 and earlier allows a remote attacker with an administrative privilege to execute arbitrary code or obtain sensitive information.

Score

CVSS 3.0 7.2 High

Status

Modified - vultures@jpcert.or.jp

Published

2018-06-26

Last modified

2024-08-05

Weaknesses

CWE-269

Affected products

• Zenphoto (Zenphoto)

References

• http://jvn.jp/en/jp/JVN33124193/index.html
• https://www.zenphoto.org/news/zenphoto-1.5