20031011 Gallery 1.4 including file vulnerabilitymailing list
http://www.securityfocus.com/archive/1/341044 CVE-2003-1227
Gallery 1.4 - 'index.php' Remote File Inclusion
Record summary
CVE-2003-1227 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
PHP remote file include vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on Windows or in Configuration mode on Unix, allows remote attackers to inject arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412. NOTE: this issue might be exploitable only during installation, or if the administrator has not run a security script after installation.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBGallery 1.4 - 'index.php' Remote File InclusionExploitDB exploitby peterNot analyzed1 file
References
620031011 RE: Gallery 1.4 including file vulnerabilitymailing list
http://www.securityfocus.com/archive/1/341094 20031012 Re: Gallery 1.4 including file vulnerabilitymailing list
http://www.securityfocus.com/archive/1/341098 8814vdb entry
http://www.securityfocus.com/bid/8814 gallery-indexphp-file-include(13419)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/13419 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2003-1227