Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbitrary PHP code via a
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- 28 on Exploit-DB
Summary
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbitrary PHP code via a URL in the _config[site_path] parameter to (1) admin_password.php, (2) add_welcome_text.php, (3) admin_email.php, (4) add_templates.php, (5) admin_paypal_email.php, (6) approve_member.php, (7) delete_member.php, (8) index.php, (9) list_members.php, (10) membership_pricing.php, or (11) send_email.php in admin/; (12) config.php or (13) db_config.php in include/; or (14) add_category.php, (15) add_news.php, (16) change_catalog_template.php, (17) couple_milestone.php, (18) couple_profile.php, (19) delete_category.php, (20) index.php, (21) login.php, (22) logout.php, (23) register.php, (24) upload_photo.php, (25) user_catelog_password.php, (26) user_email.php, (27) user_extend.php, or (28) user_membership_password.php in user/. NOTE: the include/common_function.php vector is already covered by another candidate from the same date.
Timeline
- Public exploit on Exploit-DB
EDB-29410, EDB-29408, EDB-29409, EDB-29407, EDB-29411, EDB-29412, EDB-29413, EDB-29414, EDB-29415, EDB-29416, EDB-29417, EDB-29418, EDB-29419, EDB-29420, EDB-29421, EDB-29422, EDB-29423, EDB-29424, EDB-29425, EDB-29426, EDB-29427, EDB-29428, EDB-29429, EDB-29430, EDB-29431, EDB-29432, EDB-29433, EDB-29434
- CVE published
- Record last updated
Affected versions
- n/a n/a
Version range not reported
References 53
osvdb.org
securityreason.com
securityfocus.com
Exploit-DB
- Exploit EDB-29410
- Exploit EDB-29408
- Exploit EDB-29409
- Exploit EDB-29407
- Exploit EDB-29411
- Exploit EDB-29412
- Exploit EDB-29413
- Exploit EDB-29414
- Exploit EDB-29415
- Exploit EDB-29416
- Exploit EDB-29417
- Exploit EDB-29418
- Exploit EDB-29419
- Exploit EDB-29420
- Exploit EDB-29421
- Exploit EDB-29422
- Exploit EDB-29423
- Exploit EDB-29424
- Exploit EDB-29425
- Exploit EDB-29426
- Exploit EDB-29427
- Exploit EDB-29428
- Exploit EDB-29429
- Exploit EDB-29430
- Exploit EDB-29431
- Exploit EDB-29432
- Exploit EDB-29433
- Exploit EDB-29434