Local File Inclusion Vulnerability in Zenphoto by Zenphoto Team
CVE-2018-0610

7.2HIGH

Key Information:

Vendor

Zenphoto

Status
Zenphoto
Vendor
CVE Published:
26 June 2018

What is CVE-2018-0610?

A local file inclusion vulnerability exists in Zenphoto versions 1.4.14 and earlier, allowing an attacker with administrative access to execute arbitrary code or access sensitive data. This vulnerability poses a significant risk to systems running these versions, as it can lead to unauthorized actions and data breaches. It is crucial for administrators to update to the latest version to mitigate these risks.

Affected Version(s)

Zenphoto 1.4.14 and earlier

References

https://www.zenphoto.org/news/zenphoto-1.5
x_refsource_MISC
http://jvn.jp/en/jp/JVN33124193/index.html
third-party-advisoryx_refsource_JVN

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.