EUVD-2006-2396

Malware in sbrugna...

Remote file inclusion

PHP remote file inclusion vulnerability in resources/includes/popp.config.loader.inc.php in PopSoft Digital PopPhoto Studio 3.5.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter cfg'popphotobasepath' variable. NOTE: Pixaria has notified CVE...

CVE-2006-2395

The CVE-2006-2395 issue affects PopPhoto Studio 3.5.4 and earlier, where a PHP remote file inclusion can occur in resources/includes/popp.config.loader.inc.php via the include_path variable cfg['popphoto_base_path'], allowing arbitrary PHP code execution. The problem is rooted in PopPhoto’s inclu...