PhotoShow Remote Code Execution Vulnerability via Exiftran Path Injection

A remote code execution vulnerability exists in PhotoShow version 3.0, allowing authenticated administrators to inject malicious commands through the Exiftran path configuration. This vulnerability can be exploited by base64 encoding a reverse shell command and executing it via a crafted video upload process, taking advantage of the application's FFmpeg configuration settings.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where PhotoShow is hosted.

Reproduction

To reproduce this vulnerability, log in as an administrator and navigate to the admin settings page. Inject a base64-encoded reverse shell command into the 'FFmpeg path' field, then upload a short video. The injected command will be executed, providing a shell on the attacker's machine.