OSVDB ID: 24160 Title: WEBalbum skin2 Cookie Parameter Traversal Local File Inclusion |
Info |
|
|
Dates |
||||
|
|
Description |
WEBalbum contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to multiple scripts not properly sanitizing user input supplied to the 'skin2' cookie. This may allow an attacker to read arbitrary local files or include local files which contain arbitrary commands which will be executed by the vulnerable scripts. |
Classification |
Location:
Remote / Network Access
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Public Disclosure: OSVDB Verified OSVDB: Web Related |
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue. |
Products |
|
References |
|
Credit |
|
austici.org - Personal Page