Vulnerabilities > CVE-2006-3075 - Remote File Include vulnerability in Picturedis Photoalbum and Picturedis Professional

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
picturedis
NVD
Published: 2006-06-19
Updated: 2018-10-18

Summary

Multiple PHP remote file inclusion vulnerabilities in PictureDis Professional 1.33 Build 234 and earlier and PictureDis Photoalbum 4.82 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to files in photoalbum/ including (1) thumstbl.php, (2) wpfiles.php, and (3) wallpapr.php.

Vulnerable Configurations

Part Description Count
Application
Picturedis
2

References