iPhotoAlbum Multiple File Include Vulnerabilities
BID:14229
Info
iPhotoAlbum Multiple File Include Vulnerabilities
| Bugtraq ID: | 14229 |
| Class: | Input Validation Error |
| CVE: |
CVE-2005-2246 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jul 12 2005 12:00AM |
| Updated: | May 12 2015 07:49PM |
| Credit: | V4mu is credited with the discovery of this vulnerability. |
| Vulnerable: |
iPhotoAlbum iPhotoAlbum 1.1 iPhotoAlbum iPhotoAlbum 1.0 beta3 iPhotoAlbum iPhotoAlbum 1.0 beta2 iPhotoAlbum iPhotoAlbum 1.0 beta1 iPhotoAlbum iPhotoAlbum 1.0 |
| Not Vulnerable: | |
Discussion
iPhotoAlbum Multiple File Include Vulnerabilities
iPhotoAlbum is prone to multiple local and remote file-include vulnerabilities.
An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected computer with the privileges of the webserver process. This may potentially facilitate unauthorized access.
iPhotoAlbum is prone to multiple local and remote file-include vulnerabilities.
An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected computer with the privileges of the webserver process. This may potentially facilitate unauthorized access.
Exploit / POC
iPhotoAlbum Multiple File Include Vulnerabilities
Attackers can use a browser to exploit these issues.
Attackers can use a browser to exploit these issues.
Solution / Fix
iPhotoAlbum Multiple File Include Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].