DM Albums Multiple File Deletion Vulnerabilities

Bugtraq ID:	36799
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 21 2009 12:00AM
Updated:	Oct 23 2009 07:08PM
Credit:	An anonymous researcher and safety.
Vulnerable:	DutchMonkey DM Albums 2.1 DutchMonkey DM Albums 2.0
Not Vulnerable:

DM Albums Multiple File Deletion Vulnerabilities

DM Albums is prone to multiple vulnerabilities that can allow attackers to delete arbitrary files. The issues occur because the software fails to properly sanitize user-supplied input.

Attackers can exploit these issues to delete arbitrary files on the victim's computer in the context of the vulnerable application.

These issues affect versions *prior to* DM Albums 2.1, but note that version 2.1 is still vulnerable to one of the issues.

DM Albums Multiple File Deletion Vulnerabilities

An attacker can use a browser to launch attacks.

DM Albums Multiple File Deletion Vulnerabilities

Solution:
Reports indicate that the vendor addressed the issue affecting the 'dm-albums/wp-dm-albums-ajax.php' script in DM Albums 2.1. The directory-traversal issue on applications running on platforms other than Windows was also addressed in DM Albums 2.1.

DM Albums Multiple File Deletion Vulnerabilities

References:

• DM Albums Homepage (DutchMonkey)
  
• Latest News & Announcements (DutchMonkey)
  
• WordPress �?? DM Albums Version 2.0 Critical Vulnerability (nDarkness)