PhotoPost PHP Pro image file upload

photopost-file-upload (19679)

Medium Risk

Description:

PhotoPost PHP Pro is an online photo gallery running on Microsoft Windows and Unix-based operating systems. PhotoPost PHP Pro versions 5.0 RC3 up to 5.0.1 could allow a remote attacker to upload malicious files, caused by improper validation of user-supplied input. A remote attacker could upload a malicious file which, once the file is opened, would allow the attacker to execute code on the vulnerable Web server.

Platforms Affected:

• PhotoPost, PhotoPost PHP Pro 5.0 RC3 up to 5.0.1

Remedy:

Upgrade to the latest version of PhotoPost PHP Pro (5.0.1 or later), available from the PhotoPost PHP Pro Web site. See References.

Consequences:

Gain Access

References:

• BugTraq Mailing List, Fri Mar 11 2005 - 12:29:59 CST , PhotoPost PHP 5.0 RC3, and later, multiple vulnerabilities at http://archives.neohapsis.com/archives/bugtraq/2005-03/0200.html.
• PhotoPost PHP Pro Web page, PhotoPost PHP Pro Photo Gallery Software for Websites at http://www.photopost.com/index.html.
• BID-12779: All Enthusiast PhotoPost PHP Pro Multiple Remote Vulnerabilities
• CVE-2005-0778: PhotoPost PHP 5.0 RC3 does not fully verify that an uploaded file is an image file, which allows remote attackers to inject arbitrary Javascript by uploading non-image files with an image extension such as .gif.
• SA14576: PhotoPost PHP Pro Multiple Vulnerabilities

Reported:

Mar 11, 2005

The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.

For corrections or additions please email xforce@iss.net

Return to the main page