CVE-2005-2413

PHP remote file inclusion vulnerability in apa_phpinclude.inc.php in Atomic Photo Album (APA) allows remote attackers to execute arbitrary PHP code via the apa_module_basedir parameter.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-08-03

Last modified

2024-08-07

Affected products

• Atomic Photo Album (Atomic Photo Album)

References

• http://marc.info/?l=bugtraq&m=112230428725189&w=2
• http://secunia.com/advisories/16201
• http://securitytracker.com/id?1014569
• http://www.osvdb.org/18265
• http://www.securityfocus.com/bid/14368
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21562