Vulnerabilidades em Zenphoto
7 resultadosAnálise Vexday
Zenphoto registra 7 vulnerabilidades na base do Vexday, todas de severidade menor a média, com nenhuma sob exploração ativa conhecida. A fraqueza dominante é XSS (CWE-79), padrão em aplicações web, sem novos riscos nos últimos 90 dias, indicando panorama de risco estável e baixa urgência de remediação imediata.
CVE-2018-0610—Local file inclusion vulnerability in Zenphoto 1.4.14 and earlier allows a remote attacker with an administrative privilege to execute arbitEPSS 1.6%CVE-2020-5593—Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zEPSS 1.2%CVE-2020-5592—Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspeciEPSS 0.8%CVE-2022-44449MEDIUMStored cross-site scripting vulnerability in Zenphoto versions prior to 1.6 allows remote a remote authenticated attacker with an administraEPSS 0.7%CVE-2012-4519—Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS.EPSS 0.7%CVE-2023-53916MEDIUMZenphoto 1.6 Stored Cross-Site Scripting via User Postal Code FieldEPSS 0.3%CVE-2023-53915MEDIUMZenphoto 1.6 Stored Cross-Site Scripting via Album DescriptionEPSS 0.3%