CVE-2007-1456 - CVE House
Back to Database
Status published High CVE-2007-1456

PHP remote file inclusion vulnerability in common.php in PHP Photo...

Vulnerability Description

PHP remote file inclusion vulnerability in common.php in PHP Photo Album allows remote attackers to execute arbitrary PHP code via a URL in the db_file parameter. NOTE: CVE disputes this vulnerability, because versions 0.3.2.6 and 0.4.1beta do not contain this file. However, it is possible that the original researcher was referring to a different product

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-1456

Credits & Attribution

No credits recorded in the NVD database.

References

More from phpalbum.net

View All →
CVE-2006-6613
Directory traversal vulnerability in language.php in phpAlbum 0.4.1 Beta 6...
Medium 6.8
CVE-2006-4498
PHP remote file inclusion vulnerability in sommaire_admin.php in PhpAlbum (mod_phpalbum)...
High 7.5
CVE-2005-3948
Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier...
Medium 5

Affected Vendor

phpalbum.net

View all reports →

Affected Software

phpalbum
Vulnerable Versions:
Unknown

Timeline

Official Publish: March 14th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.