PHP Remote File Inclusion Vulnerability in LiveAlbum by LiveAlbum
CVE-2007-5315
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 61%
What is CVE-2007-5315?
The vulnerability found in LiveAlbum version 0.9.0 concerns a PHP remote file inclusion issue in the common.php file. When the register_globals feature is enabled, remote attackers can exploit this flaw to execute arbitrary PHP code. This can occur through manipulating the livealbum_dir parameter within the script, potentially allowing for severe unauthorized access and control over the affected system.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.