CVE-2005-2246

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• iPhotoAlbum 1.1 - 'header.php' Remote File Inclusion2007-03-28 · webapps · php · Verified

Impact

Multiple PHP remote file inclusion vulnerabilities in iPhotoAlbum 1.1 allow remote attackers to execute arbitrary code via the (1) doc_path parameter to getpage.php or (2) set_menu parameter to lib/static/header.php.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/16031
• http://securitytracker.com/id?1014448
• http://www.attrition.org/pipermail/vim/2007-March/001474.html
• http://www.securityfocus.com/bid/14229
• http://www.securityfocus.com/bid/23189
• https://www.exploit-db.com/exploits/3596
• http://secunia.com/advisories/16031
• http://securitytracker.com/id?1014448
• http://www.attrition.org/pipermail/vim/2007-March/001474.html
• http://www.securityfocus.com/bid/14229
• http://www.securityfocus.com/bid/23189
• https://www.exploit-db.com/exploits/3596