PT-2004-2769 · Photopost · Photopost Php Pro

Published 2004-03-29 · Updated 2017-07-11 · CVE-2004-1870

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PhotoPost PHP Pro versions 4.6.x and earlier

Description The issue allows remote attackers to gain users' passwords due to multiple SQL injection vulnerabilities. These vulnerabilities can be exploited through various parameters in different PHP files, including the photo parameter to "addfav.php" and "comments.php", the credit parameter to "comments.php", the cat parameter to "index.php", "showgallery.php", and "uploadphoto.php", the ppuser parameter to "showgallery.php", and the albumid parameter to "useralbums.php".

Recommendations For PhotoPost PHP Pro versions 4.6.x and earlier, update to a version later than 4.6.x to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable parameters, such as photo, credit, cat, ppuser, and albumid, in the affected PHP files until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2004-1870

Affected Products

Photopost Php Pro

References · 9

• 🔥 https://exploit-db.com/exploits/23885 · Exploit
• 🔥 https://exploit-db.com/exploits/43808 · Exploit
• http://securityfocus.com/bid/9994 · Vendor Advisory
• http://securitytracker.com/id?1009571 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1870 · Security Note
• http://secunia.com/advisories/11241 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=108057790723123&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1870 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15642 · Note