PHP Album "data_dir" Parameter Handling PHP File Inclusion Vulnerability
Description
A vulnerability has been identified in PHP Album, which could be exploited by remote attackers to gain knowledge of sensitive information or compromise a vulnerable server. This flaw is due to an input validation error in the "language.php" script that does not properly validate the "data_dir" variable, which could be exploited by remote attackers to include remote files (PHP5), or inject arbitrary commands (e.g. into the log file) and execute them with the privileges of the web server via a local file inclusion (PHP4).
Vulnerable Products
Vulnerable Software: PHP Album version 0.3.2.3 and prior
