Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-2353. PoCs published by t0pP8uZz.
AI-analyzed exploit summary The exploit describes a Local File Inclusion (LFI) vulnerability in GNU/Gallery <= 1.1.1.0 due to improper input validation in the 'admin.php' file. The vulnerable code allows arbitrary file inclusion via the 'show' parameter, enabling attackers to read sensitive files like '/etc/passwd'.
Description
Directory traversal vulnerability in admin.php in GNU/Gallery 1.1.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the show parameter.
Exploits (1)
The exploit describes a Local File Inclusion (LFI) vulnerability in GNU/Gallery <= 1.1.1.0 due to improper input validation in the 'admin.php' file. The vulnerable code allows arbitrary file inclusion via the 'show' parameter, enabling attackers to read sensitive files like '/etc/passwd'.