https://glc.st/cves/cve-2020-22154-authenticated-sql-injection-in-zenphoto/
Authenticated SQL injection in Zenphoto v1.5.6 and prior