CVE

Id
17943  
CVE No.
CVE-2006-1839  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when register_globals is enabled, allows remote attackers to execute arbitrary code via an FTP URL in the data_dir parameter, which satisfies the file_exists function call.  
Phase
Assigned (20060419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
152847 17943 CVE-2006-1839 BUGTRAQ:20060415 PHP Album <= 0.3.2.3 remote commnads execution  View
152848 17943 CVE-2006-1839 URL:http://www.securityfocus.com/archive/1/archive/1/431067/100/0/threaded  View
152849 17943 CVE-2006-1839 MISC:http://retrogod.altervista.org/phpalbum_0323_incl_xpl.html  View
152850 17943 CVE-2006-1839 BID:17526  View
152851 17943 CVE-2006-1839 URL:http://www.securityfocus.com/bid/17526  View
152852 17943 CVE-2006-1839 VUPEN:ADV-2006-1382  View
152853 17943 CVE-2006-1839 URL:http://www.vupen.com/english/advisories/2006/1382  View
152854 17943 CVE-2006-1839 OSVDB:24741  View
152855 17943 CVE-2006-1839 URL:http://www.osvdb.org/24741  View
152856 17943 CVE-2006-1839 SECUNIA:19661  View
152857 17943 CVE-2006-1839 URL:http://secunia.com/advisories/19661  View
152858 17943 CVE-2006-1839 XF:phpalbum-language-file-include(25846)  View

Related JVN