OSVDB ID: 25524

Title: PopPhoto popp.config.loader.inc.php cfg[popphoto_base_path] Parameter Remote File Inclusion

Info

Disclosure

May 14, 2006

Discovery

Unknown

Dates

Exploit

May 14, 2006

Solution

Unknown

Description

PopPhoto contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to popp.config.loader.inc.php not properly sanitizing user input supplied to the cfg[popphoto_base_path] variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public
OSVDB: Web Related

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Jamie Longstaff

PopPhoto

3.5.4

References

Security Tracker: 1016092
Bugtraq ID: 17970
CVE ID: 2006-2395 (see also: NVD)
Secunia Advisory ID: 20087
ISS X-Force ID: 26449
VUPEN Advisory: ADV-2006-1792
Mail List Post: http://attrition.org/pipermail/vim/2006-June/000869.html
Vendor URL: http://pixaria.com/popphoto/
Other Advisory URL: http://pridels.blogspot.com/2006/05/popphoto-remote-file-inclusion-vuln.html

Credit

VietMafia - -

Direct URL: http://osvdb.org/25524