CVEs-PoC/2009/CVE-2009-0423.md

CVE-2009-0423

Description

Directory traversal vulnerability in index.php in Php Photo Album (PHPPA) 0.8 BETA allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the preview parameter.

POC

Reference

• https://www.exploit-db.com/exploits/7786

Github

• https://github.com/gosirys/Exploits