| Package | Affected versions | Patched versions |
|---|---|---|
| zenphoto | = 1.0.4= 1.0.5= 1.0.6 |
Directory traversal vulnerability in zen/template-functions.php in zenphoto 1.0.4 up to 1.0.6 allows remote attackers to list arbitrary directories via ".." sequences in the album parameter to index.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free