Vulnerability Details CVE-2005-2413
PHP remote file inclusion vulnerability in apa_phpinclude.inc.php in Atomic Photo Album (APA) allows remote attackers to execute arbitrary PHP code via the apa_module_basedir parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://marc.info/?l=bugtraq&m=112230428725189&w=2
- http://secunia.com/advisories/16201
- http://securitytracker.com/id?1014569
- http://www.osvdb.org/18265
- http://www.securityfocus.com/bid/14368
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21562
- http://marc.info/?l=bugtraq&m=112230428725189&w=2
- http://secunia.com/advisories/16201
- http://securitytracker.com/id?1014569
- http://www.osvdb.org/18265
- http://www.securityfocus.com/bid/14368
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21562
Products affected by CVE-2005-2413
-
cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.0
-
cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.0.1
-
cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.0.2
-
cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.0.3
-
cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.0.4
-
cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.0.5
-
cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.1.0_pre1
-
cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.1.0_pre2
-
cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.1.0_pre3
-
cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.1.0_pre4