Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2006-2395

Published: 16/05/2006 Updated: 14/02/2024
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Subscribe to Popsoft Digital

Vulnerability Summary

PHP remote file inclusion vulnerability in resources/includes/popp.config.loader.inc.php in PopSoft Digital PopPhoto Studio 3.5.4 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the include_path parameter (cfg['popphoto_base_path'] variable). NOTE: Pixaria has notified CVE that "PopPhoto is NOT a product of Pixaria. It was a product of PopSoft Digital and is only hosted by Pixaria as a courtesy... The vulnerability listed was patched by the previous vendor and all previous users have received this update."

Vulnerable Product Search on Vulmon Subscribe to Product

popsoft digital popphoto 3.5.4

Exploits

Exploit DB: Pixaria PopPhoto 3.5.4 - 'CFG[popphoto_base_path]' Remote File Inclusion
source: wwwsecurityfocuscom/bid/17970/info Pixaria PopPhoto is prone to a remote file-include vulnerability This issue is due to a failure in the application to properly sanitize user-supplied input An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the ...

References

CWE-94http://secunia.com/advisories/20087http://www.securityfocus.com/bid/17970http://www.osvdb.org/25524http://securitytracker.com/id?1016092http://www.pixaria.com/news/article/35/http://www.attrition.org/pipermail/vim/2006-June/000869.htmlhttp://pridels0.blogspot.com/2006/05/popphoto-remote-file-inclusion-vuln.htmlhttp://www.vupen.com/english/advisories/2006/1792https://exchange.xforce.ibmcloud.com/vulnerabilities/26449https://nvd.nist.govhttps://www.exploit-db.com/exploits/27868/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTICVE-2024-35863CVE-2024-35910man-in-the-middleCVE-2024-35912CVE-2024-25742LFICVE-2024-32002CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook