PT-2005-1449 · Gallery · Gallery

Janek Vind + 1 · Publicado 2005-01-12 · Atualizado 2017-07-11 · CVE-2005-0376

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SGallery version 1.01

Description The issue allows local and possibly remote attackers to execute arbitrary PHP code by modifying the DOCUMENT ROOT parameter to reference a URL on a remote web server that contains specific files, such as config.php or sql layer.php.

Recommendations For SGallery version 1.01, consider restricting access to the DOCUMENT ROOT parameter to prevent modification and avoid using URLs on remote web servers that could contain malicious files like config.php or sql layer.php.

Exploit

Correção

Identificadores relacionados

CVE-2005-0376

Produtos afetados

Gallery

Referências · 7

• 🔥 http://secunia.com/advisories/13824 · Exploit
• 🔥 http://waraxe.us/advisory-39.html · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030844.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0376 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=110557050700947&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18878 · Nota
• http://securitytracker.com/id?1012868 · Nota