CVE-2004-1820
4nalbum_module 0.92 - Remote File Inclusion via basepath Parameter
Title source: manualExploitation Summary
EIP tracks 1 public exploit for CVE-2004-1820. PoCs published by Janek Vind.
AI-analyzed exploit summary The provided text describes multiple vulnerabilities in 4nAlbum, including remote file inclusion, XSS, SQL injection, and information disclosure. It outlines affected scripts and attack vectors but does not include executable exploit code.
Description
PHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary PHP code by modifying the basepath parameter to reference a URL on a remote web server that contains fileFunctions.php.
Exploits (1)
The provided text describes multiple vulnerabilities in 4nAlbum, including remote file inclusion, XSS, SQL injection, and information disclosure. It outlines affected scripts and attack vectors but does not include executable exploit code.