CVE-2005-3948

The provided text describes a local file inclusion (LFI) vulnerability in phpAlbum 0.2.3 and prior versions. It includes example URLs demonstrating how an attacker could exploit the vulnerability to read arbitrary files or execute server-side script code.

This is a technical writeup detailing multiple vulnerabilities in PHP Photo Album <= 0.4.1.16, including XSS, local file disclosure, and PHP code injection. It provides proof-of-concept URLs and describes the vulnerable parameters.