Zenphoto vulnerabilities

Products

• Zenphoto 33

Newest

• zenphoto Zenphoto 1.6 Stored Cross-Site Scripting via User Postal Code Field CVE-2023-53916 5.1 MediumDecember 17, 2025
• zenphoto Zenphoto 1.6 Stored Cross-Site Scripting via Album Description CVE-2023-53915 5.1 MediumDecember 17, 2025
• zenphoto Stored cross-site scripting vulnerability in Zenphoto versions prior to 1.6 allows remote a... CVE-2022-44449 4.8 MediumDecember 21, 2022
• zenphoto Zenphoto through 1.5.7 is affected by authenticated arbitrary file upload, leading to remote code... CVE-2020-36079 Public exploitDisputed 7.2 HighFebruary 26, 2021
• zenphoto Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by... CVE-2020-5593 8.8 HighJune 11, 2020
• zenphoto Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to... CVE-2020-5592 6.1 MediumJune 11, 2020
• zenphoto Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS. CVE-2012-4519 6.1 MediumFebruary 11, 2020
• zenphoto Cross-site request forgery (CSRF) vulnerability in admin.php in Zenphoto before 1.4.9 allows... CVE-2015-5595 Public exploit 6.5 MediumDecember 31, 2019
• zenphoto The sanitize_string function in Zenphoto before 1.4.9 does not properly sanitize HTML tags, which... CVE-2015-5593 6.1 MediumDecember 31, 2019
• zenphoto Incomplete blacklist in sanitize_string in Zenphoto before 1.4.9 allows remote attackers to... CVE-2015-5592 6.1 MediumDecember 31, 2019
• zenphoto SQL injection vulnerability in Zenphoto before 1.4.9 allow remote administrators to execute... CVE-2015-5591 Public exploit 7.2 HighDecember 31, 2019
• zenphoto Zenphoto 1.4.14 has multiple cross-site scripting (XSS) vulnerabilities via different URL... CVE-2018-20140 6.1 MediumMarch 17, 2019
• zenphoto Local file inclusion vulnerability in Zenphoto 1.4.14 and earlier allows a remote attacker with... CVE-2018-0610 7.2 HighJune 26, 2018
• zenphoto The sanitize_string function in ZenPhoto before 1.4.9 utilized the html_entity_decode function... CVE-2015-5594 Public exploit 6.1 MediumJuly 25, 2017
• zenphoto Cross-site scripting (XSS) vulnerability in ZenPhoto20 1.1.3 and earlier allows remote attackers... CVE-2015-2949 4.3 MediumMay 31, 2015
• zenphoto Cross-site scripting (XSS) vulnerability in the image processor in Zenphoto before 1.4.8 allows... CVE-2015-2948 4.3 MediumMay 31, 2015
• zenphoto SQL injection vulnerability in zp-core/zp-extensions/wordpress_import.php in Zenphoto before 1.4... CVE-2013-7242 6.5 MediumDecember 31, 2013
• zenphoto Cross-site scripting (XSS) vulnerability in the export function in zp-core/zp-extensions... CVE-2013-7241 4.3 MediumDecember 31, 2013
• zenphoto Cross-site scripting (XSS) vulnerability in Zenphoto before 1.4.3 allows remote attackers to... CVE-2012-2641 4.3 MediumJuly 5, 2012
• zenphoto Multiple cross-site scripting (XSS) vulnerabilities in ZENphoto 1.4.2 allow remote attackers to... CVE-2012-0995 4.3 MediumFebruary 21, 2012
• zenphoto SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in... CVE-2012-0994 6.0 MediumFebruary 21, 2012
• zenphoto Eval injection vulnerability in zp-core/zp-extensions/viewer_size_image.php in ZENphoto 1.4.2,... CVE-2012-0993 6.8 MediumFebruary 21, 2012
• zenphoto Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote... CVE-2010-4907 Public exploit 4.3 MediumOctober 8, 2011
• zenphoto SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote... CVE-2010-4906 Public exploit 7.5 HighOctober 8, 2011
• zenphoto SQL injection vulnerability in index.php in Zenphoto 1.2.5 allows remote attackers to execute... CVE-2009-4566 Public exploit 7.5 HighJanuary 4, 2010
• zenphoto SQL injection vulnerability in index.php in Zenphoto 1.2.5, when the ZenPage plugin is enabled,... CVE-2009-4564 Public exploit 6.8 MediumJanuary 4, 2010
• zenphoto Cross-site request forgery (CSRF) vulnerability in zp-core/admin-options.php in Zenphoto 1.2.5... CVE-2009-4563 Public exploit 4.3 MediumJanuary 4, 2010
• zenphoto Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.2.5 allows remote... CVE-2009-4562 Public exploit 4.3 MediumJanuary 4, 2010
• zenphoto Cross-site scripting (XSS) vulnerability in function.php in Zenphoto 1.1.7 allows remote... CVE-2008-6925 4.3 MediumAugust 10, 2009
• zenphoto SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to... CVE-2007-6666 Public exploit 7.5 HighJanuary 4, 2008
• zenphoto Directory traversal vulnerability in zen/template-functions.php in zenphoto 1.0.4 up to 1.0.6... CVE-2007-0616 7.8 HighJanuary 31, 2007
• zenphoto Multiple cross-site scripting (XSS) vulnerabilities in zenphoto 1.0.1 beta and earlier allow... CVE-2006-2187 Public exploit 6.8 MediumMay 4, 2006
• zenphoto zenphoto 1.0.1 beta and earlier allow remote attackers to obtain sensitive information via a... CVE-2006-2186 5.0 MediumMay 4, 2006