Test ID:	1.3.6.1.4.1.25623.1.0.801924
Category:	Web application abuses
Title:	phpAlbum.net Multiple Vulnerabilities
Summary:	phpAlbum.net is prone to Multiple vulnerabilities.
Description:	Summary: phpAlbum.net is prone to Multiple vulnerabilities. Vulnerability Insight: The flaws are due to - Failure in the 'main.php' script to properly verify the source of HTTP request. - Failure in the 'phpdatabase.php' script to properly sanitize user-supplied input in 'var3' variable. - Failure in the 'setup.php' script to properly sanitize user-supplied input in 'ar3', 'p_new_group_name' variables. Vulnerability Impact: Successful exploitation could result in a compromise of the application, theft of cookie-based authentication credentials, disclosure or modification of sensitive data. Affected Software/OS: phpAlbum.net version 0.4.1-14_fix06 and prior. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 5.1 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.