Vulnerabilities

TI-2008-04497 CVE-2008-4714 · GHSA-2qh3-cw4r-2f2r

Atomic Photo Album 1.1.0 pre4 does not properly handle the apa_cookie_login and…

LOW 38

Atomic Photo Album 1.1.0 pre4 does not properly handle the apa_cookie_login and apa_cookie_password cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified coo…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02561 Published 2008-10-23 No fix listed CWE-287

TI-2008-04134 CVE-2008-4335 · GHSA-j82h-q99p-6xcc

SQL injection vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows…

LOW 35

SQL injection vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote attackers to execute arbitrary SQL commands via the apa_album_ID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01051 Published 2008-09-30 No fix listed CWE-89

TI-2005-02284 CVE-2005-2413 · GHSA-q7xg-3v8j-52hp

PHP remote file inclusion vulnerability in apa_phpinclude.inc.php in Atomic Photo Album…

LOW 26

PHP remote file inclusion vulnerability in apa_phpinclude.inc.php in Atomic Photo Album (APA) allows remote attackers to execute arbitrary PHP code via the apa_module_basedir parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01599 Published 2005-08-03 No fix listed

Vulnerabilities

Filters

Atomic Photo Album 1.1.0 pre4 does not properly handle the apa_cookie_login and…

SQL injection vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows…

PHP remote file inclusion vulnerability in apa_phpinclude.inc.php in Atomic Photo Album…