TI-2007-02559 CVE-2007-2647 · GHSA-hf3p-wrj3-r34r
Static code injection vulnerability in admin/admin_configuration.php in Monalbum 0.8.7…
Priority LOW 34
Static code injection vulnerability in admin/admin_configuration.php in Monalbum 0.8.7 allows remote authenticated users to inject arbitrary PHP code into the conf/config.inc.php file via the (1) gadm_pass, (2) gadm_user…