CVE-2005-3948
phpalbum < 0.2.3 - Directory Traversal via cmd or var1 Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-3948. PoCs published by r0t3d3Vil.
AI-analyzed exploit summary The provided text describes a local file inclusion (LFI) vulnerability in phpAlbum 0.2.3 and prior versions. It includes example URLs demonstrating how an attacker could exploit the vulnerability to read arbitrary files or execute server-side script code.
Description
Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the (1) cmd and (2) var1 parameters.
Exploits (2)
The provided text describes a local file inclusion (LFI) vulnerability in phpAlbum 0.2.3 and prior versions. It includes example URLs demonstrating how an attacker could exploit the vulnerability to read arbitrary files or execute server-side script code.
This is a technical writeup detailing multiple vulnerabilities in PHP Photo Album <= 0.4.1.16, including XSS, local file disclosure, and PHP code injection. It provides proof-of-concept URLs and describes the vulnerable parameters.