atomic photo album vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

PHP remote file inclusion vulnerability in apa_phpinclude.inc.php in Atomic Photo Album (APA) allows remote malicious users to execute arbitrary PHP code via the apa_module_basedir parameter.

Atomic Photo Album Atomic Photo Album 1.0 Atomic Photo Album Atomic Photo Album 1.1.0 Pre2 Atomic Photo Album Atomic Photo Album 1.1.0 Pre3 Atomic Photo Album Atomic Photo Album 1.0.3 Atomic Photo Album Atomic Photo Album 1.0.4 Atomic Photo Album Atomic Photo Album 1.0.5 Atomic Photo Album Atomic Photo Album 1.1.0 Pre1 Atomic Photo Album Atomic Photo Album 1.0.1 Atomic Photo Album Atomic Photo Album 1.0.2 Atomic Photo Album Atomic Photo Album 1.1.0 Pre4

7.5

CVSSv2

SQL injection vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote malicious users to execute arbitrary SQL commands via the apa_album_ID parameter.

Atomic Photo Album Atomic Photo Album 1.1.0 Pre4

2 EDB exploits

7.5

CVSSv2

Atomic Photo Album 1.1.0 pre4 does not properly handle the apa_cookie_login and apa_cookie_password cookies, which probably allows remote malicious users to bypass authentication and gain administrative access via modified cookies.

Atomic Photo Album Atomic Photo Album 1.1.0

1 EDB exploit

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote malicious users to inject arbitrary web script or HTML via the apa_album_ID parameter.

Constantin Charissis Atomic Photo Album 1.1.0 Pre4

1 EDB exploit

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook