CVE-2023-53916

Mô tả

Tham khảo

• exploit-db.com/exploits/51485 · Exploit
• vulncheck.com/advisories/zenphoto-stored-cross-site-scripting-via-user-postal-code-field · Exploit
• zenphoto.org/news/zenphoto-1.6 · Release Notes

Lỗ hổng khác của zenphoto

• CVE-2023-53915TRUNG BÌNH 4.6Zenphoto 1.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by inserti…
• CVE-2022-44449TRUNG BÌNH 4.8Stored cross-site scripting vulnerability in Zenphoto versions prior to 1.6 allows remote a remote authenticated attacker with an administra…
• CVE-2020-36079CAO 7.2Zenphoto through 1.5.7 is affected by authenticated arbitrary file upload, leading to remote code execution. The attacker must navigate to t…
• CVE-2020-5593CAO 8.8Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .z…
• CVE-2020-5592TRUNG BÌNH 6.1Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspeci…