Google Search: intext:Generated.by.phpix.1.0? inurl:$mode=album
none90810 rates this entry 10 out of 10.
Submitted: 2005-01-21 06:47:15
Added by: none90810
Product: PHPix Version: 1.0Vuln: Directory traversalPHPix is a Web-based photo album viewer written in PHP. It features automatic generation of thumbnails and different resolution files for viewing on the fly. Synnergy Labs has found a flaw within PHPix that allows a user to successfully traverse the file system on a remote host, allowing arbitrary files/folders to be read. http://www.securiteam.com/unixfocus/6G00K0K04K.html