MyAlbum Language.Inc.PHP远程文件包含漏洞

MyAlbum是一款基于php的WEB应用程序。 MyAlbum不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Language.Inc.php'脚本对用户提交的'langsdir'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 攻击所需条件 攻击者必须访问MyAlbum。 MyAlbum MyAlbum 3.02 http://www.comscripts.com/scripts/php.myalbum.1731.html...

CVE-2006-5865: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in language.inc.php in MyAlbum 3.02 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the langsdir parameter...

MyAlbum <= 3.02 (language.inc.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== MyAlbum = 3.02 language.inc.php Remote File Inclusion Vulnerability ======================================================================...

MyAlbum &lt;= 3.02 (language.inc.php) Remote File Inclusion Vulnerability

No description provided by source. ============================================================================================== MyAlbum = 3.02 langsdir Remote File Inclusion Vulnerability =============================================================================================== Critical...

MyAlbum 3.02 - language.inc.php Remote File Inclusion

MyAlbum 3.02 - language.inc.php Remote File Inclusion ============================================================================================== MyAlbum WWW.STARHACK.ORG ======= ===============...