CVE-2006-4498 – PhpAlbum PHP Remote File Inclusion

Description

PHP remote file inclusion vulnerability in sommaire_admin.php in PhpAlbum (mod_phpalbum) 2.15 for PortailPHP allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter, a different vector than CVE-2006-3922.


Vulnerability Information

  • Product / Framework: Phpalbum.net
  • Vendor Domain: joomla.org
  • Vulnerability Type: Code Injection
  • CVE Details: View Full CVE Details →