← Database

CVE-2007-0616

HIGH CVSS: 7.8 Published: 2007-01-31 Modified: 2026-06-16

Description

Directory traversal vulnerability in zen/template-functions.php in zenphoto 1.0.4 up to 1.0.6 allows remote attackers to list arbitrary directories via ".." sequences in the album parameter to index.php.

Affected Platforms

Zenphoto Zenphoto

Weakness Type

NVD-CWE-Other

References