← All advisories

High severity8.8NVD Advisory· Published Jun 11, 2020· Updated Jun 17, 2026

CVE-2020-5593

CVE-2020-5593

Description

Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Zenphoto/Zenphoto3 versions
cpe:2.3:a:zenphoto:zenphoto:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:zenphoto:zenphoto:*:*:*:*:*:*:*:*range: <1.5.7
- (no CPE)range: <1.5.7
- (no CPE)range: versions prior to 1.5.7

Patches

Vulnerability mechanics

References

2

jvn.jp/en/jp/JVN32252648/index.htmlnvdThird Party Advisory
www.zenphoto.org/news/zenphoto-1.5.7/nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.