|
|
Info |
Last Modified |
| 8 months ago |
|
|
|
|
Description |
4nAlbum contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the displaycategory.php script not properly sanitizing input to the "basepath" variable. An attacker may use this to include an arbitrary file from a remote server which will be processed and any commands executed.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
OSVDB:
Web Related
|
|
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.
|
|
Products |
|
4nAlbum
 |
0.92 |
|
|
|
|
|
Credit |
- Janek Vind "waraxe" - come2waraxe
 yahoo.com - Personal Page
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
