medium5.1Public exploit code
CVE-2006-1480
Directory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to include arbitrary files and execute commands by (1) injecting code i…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WebAlbum 2.02pl - COOKIE[skin2] Remote Code Execution2006-03-25 · webapps · php · Verified
Impact
Directory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to include arbitrary files and execute commands by (1) injecting code into local log files via GET commands, then (2) accessing that log via a .. (dot dot) sequence and a trailing null (%00) byte in the skin2 COOKIE parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Duda | Webalbum | through 2.02 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/19400
- http://www.osvdb.org/24160
- http://www.securityfocus.com/bid/17228
- http://www.vupen.com/english/advisories/2006/1108
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25443
- https://www.exploit-db.com/exploits/1608
- http://secunia.com/advisories/19400
- http://www.osvdb.org/24160
- http://www.securityfocus.com/bid/17228
- http://www.vupen.com/english/advisories/2006/1108
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25443
- https://www.exploit-db.com/exploits/1608