Month Of Abysssec Undisclosed Bugs – Zen Photo Image Gallery versions 1.3 and below suffer from configuration update and command execution vulnerabilities.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/94277/moaub26-zenphoto.pdf
Source: https://packetstormsecurity.com/files/94277/Month-Of-Abysssec-Undisclosed-Bugs-Zen-Photo-Image-Gallery-1.3.html