AI Score
Confidence
High
EPSS
Percentile
77.9%
Directory traversal vulnerability in zen/template-functions.php in zenphoto 1.0.4 up to 1.0.6 allows remote attackers to list arbitrary directories via “…” sequences in the album parameter to index.php.
osvdb.org/33072
secunia.com/advisories/24026
www.securityfocus.com/bid/22368
www.vupen.com/english/advisories/2007/0470
www.zenphoto.org/support/topic.php?id=1146&replies=3
www.zenphoto.org/support/topic.php?id=1148
exchange.xforce.ibmcloud.com/vulnerabilities/32102