Remote file inclusion

2018-06-2614:29:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.6%

JSON

Local file inclusion vulnerability in Zenphoto 1.4.14 and earlier allows a remote attacker with an administrative privilege to execute arbitrary code or obtain sensitive information.

CPENameOperatorVersion
zenphotole1.4.14

CPE	Name	Operator	Version
	zenphoto	le	1.4.14

References

jvn.jp/en/jp/JVN33124193/index.html

www.zenphoto.org/news/zenphoto-1.5