medium5.0Public exploit code
CVE-2003-1456
Album.pl 6.1 allows remote attackers to execute arbitrary commands, when an alternative configuration file is used, via unknown attack vectors.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mike Bobbitt Album.PL 0.61 - Remote Command Execution2003-04-26 · webapps · cgi · Verified
Impact
Album.pl 6.1 allows remote attackers to execute arbitrary commands, when an alternative configuration file is used, via unknown attack vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mike Bobbitt | Album.Pl | through 6.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://perl.bobbitt.ca/yabbse/index.php?board=2%3Baction=display%3Bthreadid=720
- http://securityreason.com/securityalert/3270
- http://www.securityfocus.com/archive/1/319763
- http://www.securityfocus.com/bid/7444
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11878
- http://perl.bobbitt.ca/yabbse/index.php?board=2%3Baction=display%3Bthreadid=720
- http://securityreason.com/securityalert/3270
- http://www.securityfocus.com/archive/1/319763
- http://www.securityfocus.com/bid/7444
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11878