CVE-2005-3948 Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the (1) cmd and (2) var1 parameters.
MediumCVSS 5.0
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the (1) cmd and (2) var1 parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpalbum.net phpalbum | <= 0.2.3 | No fix listed |
References
- pridels0.blogspot.com
- 21410 vdb-entry
- www.phpalbum.net patch
- 15651 exploit vdb-entry