AOH :: HP Unsorted G :: B06-2198.HTM

Gphotos directory traversal and cross site scripting



Gphotos Directory Traversal and Cross Site Scripting
Gphotos Directory Traversal and Cross Site Scripting



Details

The first vulnerability issue is due to an input validation error in "index.php" "diapo.php" and "affich.php" scripts that do not validate "rep","image" variables, which may be exploited to cross site scripting attacks.

http://traget/index.php?rep=[xss]

http://traget/diapo.php?rep=[xss]

http://traget/affich.php?image=[xss]

The second flaw is due to an input validation error in the "index.php" script that fails to properly validate "rep" variable, which may be exploited to disclose the contents of arbitrary folders.

http://traget/index.php?rep=../../../

Vulnerable versions

GPhotos 1.5 and prior

Credits
Moroccan Security
Contact
[ Psych0 ] 

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.