CVE

Id
19179  
CVE No.
CVE-2006-3075  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in PictureDis Professional 1.33 Build 234 and earlier and PictureDis Photoalbum 4.82 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to files in photoalbum/ including (1) thumstbl.php, (2) wpfiles.php, and (3) wallpapr.php.  
Phase
Assigned (20060619)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
170994 19179 CVE-2006-3075 BUGTRAQ:20060615 PictureDis Products "lang" Parameter File Inclusion Vulnerability  View
170995 19179 CVE-2006-3075 URL:http://www.securityfocus.com/archive/1/archive/1/437449/100/100/threaded  View
170996 19179 CVE-2006-3075 BID:18471  View
170997 19179 CVE-2006-3075 URL:http://www.securityfocus.com/bid/18471  View
170998 19179 CVE-2006-3075 VUPEN:ADV-2006-2352  View
170999 19179 CVE-2006-3075 URL:http://www.vupen.com/english/advisories/2006/2352  View
171000 19179 CVE-2006-3075 OSVDB:26500  View
171001 19179 CVE-2006-3075 URL:http://www.osvdb.org/26500  View
171002 19179 CVE-2006-3075 OSVDB:26501  View
171003 19179 CVE-2006-3075 URL:http://www.osvdb.org/26501  View
171004 19179 CVE-2006-3075 OSVDB:26502  View
171005 19179 CVE-2006-3075 URL:http://www.osvdb.org/26502  View
171006 19179 CVE-2006-3075 SECTRACK:1016279  View
171007 19179 CVE-2006-3075 URL:http://securitytracker.com/id?1016279  View
171008 19179 CVE-2006-3075 SECUNIA:20656  View
171009 19179 CVE-2006-3075 URL:http://secunia.com/advisories/20656  View
171010 19179 CVE-2006-3075 XF:picturedis-lang-file-include(27183)  View

Related JVN