Unspecified vulnerability in Ampache 3.3.2 and earlier, when register_globals is enabled, allows remote attackers to bypass security restrictions and gain guest access.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ampache | Ampache | 3.2 (including) | 3.2 (including) |
| Ampache | Ampache | 3.2.1 (including) | 3.2.1 (including) |
| Ampache | Ampache | 3.2.2 (including) | 3.2.2 (including) |
| Ampache | Ampache | 3.2.3 (including) | 3.2.3 (including) |
| Ampache | Ampache | 3.2.4 (including) | 3.2.4 (including) |
| Ampache | Ampache | 3.3 (including) | 3.3 (including) |
| Ampache | Ampache | 3.3.1 (including) | 3.3.1 (including) |
| Ampache | Ampache | 3.3.1.2 (including) | 3.3.1.2 (including) |
| Ampache | Ampache | 3.3.2 (including) | 3.3.2 (including) |
References
- http://secunia.com/advisories/22842
- http://www.securityfocus.com/bid/20798
- http://www.vupen.com/english/advisories/2006/4236
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29892
- https://svn.ampache.org/branches/3.3.2/docs/CHANGELOG
- http://secunia.com/advisories/22842
- http://www.securityfocus.com/bid/20798
- http://www.vupen.com/english/advisories/2006/4236
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29892
- https://svn.ampache.org/branches/3.3.2/docs/CHANGELOG