CVE-2007-2426

EXPLOITED

myGallery < 1.4b4 - Remote File Inclusion via myPath Parameter

Title source: llm

Exploitation Summary

CVE-2007-2426 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including GoLd_M.

AI-analyzed exploit summary This is a writeup describing a remote file inclusion vulnerability in myGallery 1.2.1. The vulnerability arises from unsanitized user input in the 'myPath' parameter, which is directly used in a require_once statement.

Description

PHP remote file inclusion vulnerability in myfunctions/mygallerybrowser.php in the myGallery 1.4b4 and earlier plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the myPath parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by GoLd_M · textwebappsphp

https://www.exploit-db.com/exploits/3814

View Code ZIP pw:eip

This is a writeup describing a remote file inclusion vulnerability in myGallery 1.2.1. The vulnerability arises from unsanitized user input in the 'myPath' parameter, which is directly used in a require_once statement.

Classification

Writeup 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: myGallery 1.2.1

No auth needed

Prerequisites: Access to the vulnerable endpoint · Ability to host a malicious file on a remote server

MITRE ATT&CK