VULNERABILITY INTELLIGENCE
CVE-2007-0616
CVSS score7.8 HIGH
EPSS probability2.23%
CISA KEVNot currently listed
Published2007-01-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:N/A:N
Description
Directory traversal vulnerability in zen/template-functions.php in zenphoto 1.0.4 up to 1.0.6 allows remote attackers to list arbitrary directories via ".." sequences in the album parameter to index.php.