medium5.0Public exploit code
CVE-2005-3948
Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the (1) cmd and (2) var1 parame…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP Photo Album 0.2.3/4.1 - Local File Inclusion2005-11-30 · webapps · php · Verified
- PHP Photo Album 0.4.1.16 - Multiple Disclosure Vulnerabilities2011-10-29 · webapps · php · Verified
Impact
Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the (1) cmd and (2) var1 parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpalbum.Net | Phpalbum | through 0.2.3 |
References
- NVD record
- CVE.org record
- http://pridels0.blogspot.com/2005/11/phpalbum-local-file-include-vuln.html
- http://www.osvdb.org/21410
- http://www.phpalbum.net/dw
- http://www.securityfocus.com/bid/15651
- http://pridels0.blogspot.com/2005/11/phpalbum-local-file-include-vuln.html
- http://www.osvdb.org/21410
- http://www.phpalbum.net/dw
- http://www.securityfocus.com/bid/15651