CVE-2018-20140

Description

References

• packetstormsecurity.com/files/151052/ZenPhoto-1.4.14-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2019/Jan/22 · Mailing List
• zenphoto/zenphoto commit 695fb61 · Patch
• zenphoto/zenphoto commit 9db85fc · Patch
• netsparker.com/web-applications-advisories/ns-18-043-cross-site-scripting-in-zenphoto · Exploit

Weitere Schwachstellen in zenphoto

• CVE-2023-53916MITTEL 4.6Zenphoto 1.6 contains a stored cross-site scripting vulnerability in the user postal code field accessible through the admin-users.php inter…
• CVE-2023-53915MITTEL 4.6Zenphoto 1.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by inserti…
• CVE-2022-44449MITTEL 4.8Stored cross-site scripting vulnerability in Zenphoto versions prior to 1.6 allows remote a remote authenticated attacker with an administra…
• CVE-2020-36079HOCH 7.2Zenphoto through 1.5.7 is affected by authenticated arbitrary file upload, leading to remote code execution. The attacker must navigate to t…
• CVE-2020-5593HOCH 8.8Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .z…