CVE-2007-1456

PHP remote file inclusion vulnerability in common.php in PHP Photo Album allows remote attackers to execute arbitrary PHP code via a URL in the dbfile parameter. NOTE: CVE disputes this vulnerability, because versions 0.3.2.6 and 0.4.1beta do not contain this file. However, it is possible that th...

CVE-2007-1456

CVE-2007-1456 – PHP Photo Album (common.php, db_file). A remote file inclusion vulnerability in common.php allows an attacker to supply a URL to db_file to execute arbitrary PHP code. Affected versions were claimed to be pre-0.3.2.6, but the project notes that some builds may not contain common.p...