OSVDB ID: 11320 Title: Goollery viewalbum.php Arbitrary Command Execution |
Info |
|
|
Dates |
||||
|
|
Description |
Goollery contains a flaw that may allow a remote attacker to execute arbitrary commands via remote file inclusion. This flaw exists because the application does not validate the "page" variable upon submission to the viewalbum.php script. This could allow an attacker to include remote code to be executed by the target server, leading to a loss of integrity. |
Classification |
Location:
Remote / Network Access
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Public OSVDB: Web Related |
Solution |
Upgrade to version 0.04b or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
|
gmail.com -