CVE-2007-1456

CVE-2007-1456 – PHP Photo Album (common.php, db_file). A remote file inclusion vulnerability in common.php allows an attacker to supply a URL to db_file to execute arbitrary PHP code. Affected versions were claimed to be pre-0.3.2.6, but the project notes that some builds may not contain common.p...

CVE-2006-4498

CVE-2006-4498 describes a PHP remote file inclusion in sommaire_admin.php of PhpAlbum (mod_phpalbum) 2.15 for PortailPHP. The vulnerability allows remote attackers to execute arbitrary PHP code by supplying a URL in the chemin parameter, a different vector from CVE-2006-3922. The linked NVD entry...

CVE-2005-3948

CVE-2005-3948 is a directory traversal vulnerability in PHPAlbum

CVE-2006-6613

The CVE-2006-6613 issue affects phpAlbum 0.4.1 Beta 6 and earlier, where language.php can include arbitrary local files due to a directory traversal via pa_lang[include_file] when magic_quotes_gpc is disabled and register_globals is enabled. The root cause is improper handling of the include_file...