CVE-2011-3770

phpAlbum 0.4.1.14 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/FlowingDark/parameters.tpl.php and certain other files...

Information disclosure

phpAlbum 0.4.1.14 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/FlowingDark/parameters.tpl.php and certain other files...

CVE-2011-3770

CVE-2011-3770 affects phpAlbum 0.4.1.14 and allows information disclosure via a direct request to certain .php files, revealing the installation path in an error message (notably themes/Flowing_Dark/parameters.tpl.php and other files). The NVD entry documents the vulnerability as a path disclosur...

CVE-2011-3770

phpAlbum 0.4.1.14 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/FlowingDark/parameters.tpl.php and certain other files...

CVE-2006-6613

Directory traversal vulnerability in language.php in phpAlbum 0.4.1 Beta 6 and earlier, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to include and execute arbitrary local files or obtain sensitive information via a .. dot dot in the palangincludefile...

CVE-2006-6613

The CVE-2006-6613 issue affects phpAlbum 0.4.1 Beta 6 and earlier, where language.php can include arbitrary local files due to a directory traversal via pa_lang[include_file] when magic_quotes_gpc is disabled and register_globals is enabled. The root cause is improper handling of the include_file...

phpAlbum <= v0.4.1 Beta6 Remote Code Execution Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

phpAlbum <= 0.4.1 Beta 6 (language.php) Local File Inclusion Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

phpAlbum <= 0.4.1 Beta 6 (language.php) Local File Inclusion Exploit

Exploit for unknown platform in category web applications ==================================================================== phpAlbum = 0.4.1 Beta 6 language.php Local File Inclusion Exploit ==================================================================== ? print ' ::::::::: :::::::::: :::...

PHPAlbum 0.4.1 Beta 6 - language.php Local File Inclusion

PHPAlbum 0.4.1 Beta 6 - language.php Local File Inclusion DEVIL TEAM IRC: irc.milw0rm.com:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL...

PHPAlbum 0.4.1 Beta 6 - 'language.php' Local File Inclusion

DEVIL TEAM IRC: irc.milw0rm.com:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL TEAM Patriots : - Leito & Leon | friend str0ke ; pepi,...

CVE-2006-4498

CVE-2006-4498 describes a PHP remote file inclusion in sommaire_admin.php of PhpAlbum (mod_phpalbum) 2.15 for PortailPHP. The vulnerability allows remote attackers to execute arbitrary PHP code by supplying a URL in the chemin parameter, a different vector from CVE-2006-3922. The linked NVD entry...

CVE-2006-4498

PHP remote file inclusion vulnerability in sommaireadmin.php in PhpAlbum modphpalbum 2.15 for PortailPHP allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter, a different vector than CVE-2006-3922...

phpAlbum language.php data_dir Parameter Remote File Inclusion

The remote host is running phpAlbum, an open source web photo gallery written in PHP. The version of phpAlbum installed on the remote host fails to sanitize user-supplied input to the 'datadir' parameter of the 'language.php' script before using it in a PHP 'include' function. Provided PHP's...

PHPAlbum 0.2.20.2.34.1 - Language.php File Inclusion

PHPAlbum 0.2.20.2.34.1 - Language.php File Inclusion source: https://www.securityfocus.com/bid/17526/info phpAlbum is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary remote PHP code on ...

PHPAlbum 0.2.2/0.2.3/4.1 - 'Language.php' File Inclusion

source: https://www.securityfocus.com/bid/17526/info phpAlbum is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary remote PHP code on an affected computer with the privileges of the...

CVE-2005-3948

CVE-2005-3948 is a directory traversal vulnerability in PHPAlbum

CVE-2005-3948

Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the 1 cmd and 2 var1 parameters...

CVE-2005-3948

Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the 1 cmd and 2 var1 parameters...

phpAlbum Local file include vuln.

phpAlbum Local file include vuln. Vuln. dicovered by : r0t Date: 30 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/phpalbum-local-file-include-vuln.html Vendor:http://www.phpalbum.net/ affected version:v0.2.3 and prior Product Description: It is easy to install and run PHP Photo...