CVE-2008-6315

Phpmygallery - Code Injection

Title source: rule

Description

PHP remote file inclusion vulnerability in _conf/core/common-tpl-vars.php in PHPmyGallery 1.0 beta2 allows remote attackers to execute arbitrary PHP code via a URL in the confdir parameter, a different issue than CVE-2008-6316.

Exploits (1)

exploitdb WORKING POC VERIFIED
by ZoRLu · textwebappsphp
https://www.exploit-db.com/exploits/7392

Scores

EPSS 0.0269
EPSS Percentile 85.6%

Classification

CWE
CWE-94
Status draft

Affected Products (1)

phpmygallery/phpmygallery

Timeline

Published Feb 27, 2009
Tracked Since Feb 18, 2026