CVE-2020-5592

Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspecified vectors...

CVE-2020-5593

Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file...

CVE-2020-5592

Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspecified vectors...

Code injection

Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file...

CVE-2020-5593

Zenphoto shows a concrete code-injection vulnerability CVE-2020-5593 in versions prior to 1.5.7. An attacker can trigger arbitrary PHP code execution on the server by convincing a user to upload a specially crafted ZIP file; the issue stems from how the ZIP payload is processed. Affected product:...

CVE-2020-5593

Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file...

CVE-2020-5592

CVE-2020-5592 is a cross-site scripting vulnerability in Zenphoto prior to 1.5.7. The issue allows remote attackers to inject arbitrary JavaScript via unspecified vectors, leading to arbitrary script execution in a user’s browser. The available connected documents confirm Zenphoto versions before...

CVE-2020-5592

Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspecified vectors...

JVN#32252648: Multiple vulnerabilities in Zenphoto

Zenphoto is a content management system CMS. Zenphoto contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2020-5592 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:M/Au:N/C:N/I:P/A:N| Base...

Zenphoto cross-site scripting vulnerability (CNVD-2020-32727)

Zenphoto is a content management system CMS. The Zenphoto cross-site scripting vulnerability can be exploited by an attacker to obtain user cookie information...

Zenphoto Code Injection Vulnerability

Zenphoto is a content management system CMS. The Zenphoto code injection vulnerability can be exploited by an attacker to execute arbitrary PHP code...

CVE-2012-4519

Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS...

Cross site scripting

Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS...

CVE-2012-4519

Zenphoto prior to 1.4.3.4 contains a cross-site scripting (XSS) vulnerability in the admin-news-articles.php date parameter. The issue allows injection of scripts in the admin interface. Root cause: improper handling of the date parameter leading to XSS. Impact is limited to compromising admin co...

CVE-2012-4519

Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS...

ZenPhoto cross-site scripting vulnerability (CNVD-2020-03272)

ZenPhoto is a free content management system for photo libraries. The system manages images and supports multimedia such as audio and video. A cross-site scripting vulnerability exists in Zenphoto versions prior to 1.4.9. The vulnerability stems from a lack of proper validation of client-side dat...

ZenPhoto SQL Injection Vulnerability (CNVD-2020-03274)

ZenPhoto is a free content management system for photo libraries. The system manages images and supports multimedia such as audio and video. A SQL injection vulnerability exists in Zenphoto versions prior to 1.4.9. The vulnerability stems from a database-based application that lacks validation of...

ZenPhoto Cross-Site Request Forgery Vulnerability

ZenPhoto is a free content management system for photo libraries. The system manages images and supports multimedia such as audio and video. A cross-site request forgery vulnerability exists in the admin.php file in Zenphoto versions prior to 1.4.9. The vulnerability stems from the WEB applicatio...

CVE-2015-5593

The sanitizestring function in Zenphoto before 1.4.9 does not properly sanitize HTML tags, which allows remote attackers to perform a cross-site scripting XSS attack by wrapping a payload in "scriptpayload", or in an image tag, with the payload as the onerror event...