Back
CVE-2005-2413
PHP remote file inclusion vulnerability in apa_phpinclude.inc.php in Atomic Photo Album (APA) allows remote attackers to execute arbitrary PHP code via the apa_module_basedir parameter.
Published: Aug 3, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (10)
| Vendor | Product | Version |
|---|---|---|
| atomic_photo_album | atomic_photo_album | 1.0 |
| atomic_photo_album | atomic_photo_album | 1.0.1 |
| atomic_photo_album | atomic_photo_album | 1.0.2 |
| atomic_photo_album | atomic_photo_album | 1.0.3 |
| atomic_photo_album | atomic_photo_album | 1.0.4 |
| atomic_photo_album | atomic_photo_album | 1.0.5 |
| atomic_photo_album | atomic_photo_album | 1.1.0_pre1 |
| atomic_photo_album | atomic_photo_album | 1.1.0_pre2 |
| atomic_photo_album | atomic_photo_album | 1.1.0_pre3 |
| atomic_photo_album | atomic_photo_album | 1.1.0_pre4 |
GitHub Security Advisory GHSA-q7xg-3v8j-52hp
PHP remote file inclusion vulnerability in apa_phpinclude.inc.php in Atomic Photo Album (APA)...
References (12)
- http://marc.info/?l=bugtraq&m=112230428725189&w=2
- http://secunia.com/advisories/16201
- http://securitytracker.com/id?1014569
- http://www.osvdb.org/18265
- http://www.securityfocus.com/bid/14368
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21562
- http://marc.info/?l=bugtraq&m=112230428725189&w=2
- http://secunia.com/advisories/16201
- http://securitytracker.com/id?1014569
- http://www.osvdb.org/18265
- http://www.securityfocus.com/bid/14368
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21562
Risk Scores
CVSS Score
5.0 / 10
EPSS Score
1.60%
Top 26% most likely to be exploited
Threat Score
20.5 / 100
Data Sources
NVD
EPSS
GitHub