phpAlbum Multiple Security Vulnerabilities

phpAlbum is prone to an arbitrary-file-download vulnerability, multiple cross-site scripting vulnerabilities, and multiple PHP code- injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these issues to execute arbitrary script code in the...

phpAlbum Multiple Security Vulnerabilities

phpAlbum is prone to an arbitrary-file-download vulnerability, multiple cross-site scripting vulnerabilities, and multiple PHP code- injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these issues to execute arbitrary script code in the...

CVE-2011-3770

phpAlbum 0.4.1.14 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/FlowingDark/parameters.tpl.php and certain other files...

Information disclosure

phpAlbum 0.4.1.14 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/FlowingDark/parameters.tpl.php and certain other files...

CVE-2011-3770: Exposure of Sensitive Information to an Unauthorized Actor

phpAlbum 0.4.1.14 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/FlowingDark/parameters.tpl.php and certain other files...

CVE-2011-3770

CVE-2011-3770 affects phpAlbum 0.4.1.14 and allows information disclosure via a direct request to certain .php files, revealing the installation path in an error message (notably themes/Flowing_Dark/parameters.tpl.php and other files). The NVD entry documents the vulnerability as a path disclosur...

CVE-2011-3770

phpAlbum 0.4.1.14 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/FlowingDark/parameters.tpl.php and certain other files...

CVE-2006-6613

Directory traversal vulnerability in language.php in phpAlbum 0.4.1 Beta 6 and earlier, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to include and execute arbitrary local files or obtain sensitive information via a .. dot dot in the palangincludefile...

CVE-2006-6613

The CVE-2006-6613 issue affects phpAlbum 0.4.1 Beta 6 and earlier, where language.php can include arbitrary local files due to a directory traversal via pa_lang[include_file] when magic_quotes_gpc is disabled and register_globals is enabled. The root cause is improper handling of the include_file...

CVE-2006-6613: Undefined Security Weakness

Directory traversal vulnerability in language.php in phpAlbum 0.4.1 Beta 6 and earlier, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to include and execute arbitrary local files or obtain sensitive information via a .. dot dot in the palangincludefile...

phpAlbum <= v0.4.1 Beta6 Remote Code Execution Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

phpAlbum <= 0.4.1 Beta 6 (language.php) Local File Inclusion Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

phpAlbum <= 0.4.1 Beta 6 (language.php) Local File Inclusion Exploit

Exploit for unknown platform in category web applications ==================================================================== phpAlbum = 0.4.1 Beta 6 language.php Local File Inclusion Exploit ==================================================================== ? print ' ::::::::: :::::::::: :::...

PHPAlbum 0.4.1 Beta 6 - language.php Local File Inclusion

PHPAlbum 0.4.1 Beta 6 - language.php Local File Inclusion DEVIL TEAM IRC: irc.milw0rm.com:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL...

PHPAlbum 0.4.1 Beta 6 - 'language.php' Local File Inclusion

DEVIL TEAM IRC: irc.milw0rm.com:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL TEAM Patriots : - Leito & Leon | friend str0ke ; pepi,...

CVE-2006-4498

PHP remote file inclusion vulnerability in sommaireadmin.php in PhpAlbum modphpalbum 2.15 for PortailPHP allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter, a different vector than CVE-2006-3922...

CVE-2006-4498

CVE-2006-4498 describes a PHP remote file inclusion in sommaire_admin.php of PhpAlbum (mod_phpalbum) 2.15 for PortailPHP. The vulnerability allows remote attackers to execute arbitrary PHP code by supplying a URL in the chemin parameter, a different vector from CVE-2006-3922. The linked NVD entry...

CVE-2006-4498: Undefined Security Weakness

PHP remote file inclusion vulnerability in sommaireadmin.php in PhpAlbum modphpalbum 2.15 for PortailPHP allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter, a different vector than CVE-2006-3922...

phpAlbum language.php data_dir Parameter Remote File Inclusion

The remote host is running phpAlbum, an open source web photo gallery written in PHP. The version of phpAlbum installed on the remote host fails to sanitize user-supplied input to the 'datadir' parameter of the 'language.php' script before using it in a PHP 'include' function. Provided PHP's...

PHPAlbum 0.2.20.2.34.1 - Language.php File Inclusion

PHPAlbum 0.2.20.2.34.1 - Language.php File Inclusion source: https://www.securityfocus.com/bid/17526/info phpAlbum is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary remote PHP code on ...