CVE-2008-0818

freePHPgallery 0.6 - Path Traversal via Lang Cookie

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-0818. PoCs published by MhZ91.

AI-analyzed exploit summary The exploit describes a Local File Inclusion (LFI) vulnerability in freePHPgallery 0.6, where the 'lang' cookie parameter is used unsafely in include statements. The writeup identifies vulnerable files and explains how to manipulate the cookie to achieve LFI.

Description

Multiple directory traversal vulnerabilities in freePHPgallery 0.6 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie to (1) comment.php, (2) index.php, and (3) show.php.

Exploits (1)

exploitdb WRITEUP VERIFIED
by MhZ91 · textwebappsphp
https://www.exploit-db.com/exploits/5124

The exploit describes a Local File Inclusion (LFI) vulnerability in freePHPgallery 0.6, where the 'lang' cookie parameter is used unsafely in include statements. The writeup identifies vulnerable files and explains how to manipulate the cookie to achieve LFI.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: freePHPgallery 0.6
No auth needed
Prerequisites: Access to the target application · Ability to set arbitrary cookie values
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0589
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/27806
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/5124
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28972

Scores

EPSS 0.0250
EPSS Percentile 82.6%

Details

CWE
CWE-22
Status published
Products (1)
freephpgallery/freephpgallery 0.6
Published Feb 19, 2008
Tracked Since Feb 18, 2026