CVE-2018-0610

2018-06-2614:00:00

jpcert

www.cve.org

7.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.6%

JSON

Local file inclusion vulnerability in Zenphoto 1.4.14 and earlier allows a remote attacker with an administrative privilege to execute arbitrary code or obtain sensitive information.

CNA Affected

[
  {
    "product": "Zenphoto",
    "vendor": "Zenphoto",
    "versions": [
      {
        "status": "affected",
        "version": "1.4.14 and earlier"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN33124193/index.html

www.zenphoto.org/news/zenphoto-1.5