CVE-2007-5315 PHP remote file inclusion vulnerability in common.php in LiveAlbum 0.9.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the livealbum_dir paramet...
MediumCVSS 6.8
EPSS 38.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in common.php in LiveAlbum 0.9.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the livealbum_dir parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| softpedia livealbum | = 0.9.0 | No fix listed |
References
- 37618 vdb-entry
- 27139 third-party-advisory vendor-advisory
- ADV-2007-3446 vdb-entry
- livealbum-common-file-include(37028) vdb-entry
- 4503 exploit