PhotoPost PHP Pro image file upload

photopost-file-upload (19679)

Medium Risk

Description:

PhotoPost PHP Pro is an online photo gallery running on Microsoft Windows and Unix-based operating systems. PhotoPost PHP Pro versions 5.0 RC3 up to 5.0.1 could allow a remote attacker to upload malicious files, caused by improper validation of user-supplied input. A remote attacker could upload a malicious file which, once the file is opened, would allow the attacker to execute code on the vulnerable Web server.

Consequences:

Gain Access

Remedy:

Upgrade to the latest version of PhotoPost PHP Pro (5.0.1 or later), available from the PhotoPost PHP Pro Web site. See References.

References:

• BugTraq Mailing List, Fri Mar 11 2005 - 12:29:59 CST : PhotoPost PHP 5.0 RC3, and later, multiple vulnerabilities.
• PhotoPost PHP Pro Web page: PhotoPost PHP Pro Photo Gallery Software for Websites.
• BID-12779: All Enthusiast PhotoPost PHP Pro Multiple Remote Vulnerabilities
• CVE-2005-0778: PhotoPost PHP 5.0 RC3 does not fully verify that an uploaded file is an image file, which allows remote attackers to inject arbitrary Javascript by uploading non-image files with an image extension such as .gif.
• SA14576: PhotoPost PHP Pro Multiple Vulnerabilities

Platforms Affected:

• PhotoPost PhotoPost PHP Pro 5.0 RC3 up to 5.0.1

Reported:

Mar 11, 2005

The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.

For corrections or additions please email xforce@iss.net

Return to the main page