CVE-2020-36079

Zenphoto through 1.5.7 is affected by authenticated arbitrary file upload, leading to remote code execution. The attacker must navigate to the uploader plugin, check the elFinder box, and then drag and drop files into the Files(elFinder) portion of the UI. This can, for example, place a .php file in the server's uploaded/ directory. NOTE: the vendor disputes this because exploitation can only be performed by an admin who has "lots of other possibilities to harm a site.

• CWE-434

• http://packetstormsecurity.com/files/161569/Zenphoto-CMS-1.5.7-Shell-Upload.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/zenphoto/zenphoto/issues/1292Third Party Advisory
• https://www.zenphoto.org/news/why-not-every-security-issue-is-really-an-issue/Vendor Advisory
• http://packetstormsecurity.com/files/161569/Zenphoto-CMS-1.5.7-Shell-Upload.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/zenphoto/zenphoto/issues/1292Third Party Advisory
• https://www.zenphoto.org/news/why-not-every-security-issue-is-really-an-issue/Vendor Advisory

Published

Feb 26, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-36070Insecure Permission vulnerability found in Yoyager v.1.4 and…9.8
• CVE-2020-36071SQL injection vulnerability found in Tailor Management Syste…8.8
• CVE-2020-36072SQL injection vulnerability found in Tailor Management Syste…8.8
• CVE-2020-36073SQL injection vulnerability found in Tailor Management Syste…8.8
• CVE-2020-36074SQL injection vulnerability found in Tailor Mangement System…8.8
• CVE-2020-36077SQL injection vulnerability found in Tailor Mangement System…8.8
• CVE-2020-36082File Upload vulnerability in bloofoxCMS version 0.5.2.1, all…9.8
• CVE-2020-36084SQL Injection vulnerability in SourceCodester Responsive E-L…9.8
• CVE-2020-36085Stored Cross Site Scripting(XSS) vulnerability in Egavilan M…6.3
• CVE-2020-3610Possibility of double free of the drawobj that is added to t…7.8
• CVE-2020-36109ASUS RT-AX86U router firmware below version under 9.0.0.4_38…9.8
• CVE-2020-3611u'XBL SEC clears only ZI region when loading Qualcomm-signed…7.8