PT-2005-1449 · Gallery · Gallery

Janek Vind + 1 · Published 2005-01-12 · Updated 2017-07-11 · CVE-2005-0376

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SGallery version 1.01

Description The issue allows local and possibly remote attackers to execute arbitrary PHP code by modifying the DOCUMENT ROOT parameter to reference a URL on a remote web server that contains specific files, such as config.php or sql layer.php.

Recommendations For SGallery version 1.01, consider restricting access to the DOCUMENT ROOT parameter to prevent modification and avoid using URLs on remote web servers that could contain malicious files like config.php or sql layer.php.

Exploit

Fix

Related Identifiers

CVE-2005-0376

Affected Products

Gallery

References · 7

• 🔥 http://secunia.com/advisories/13824 · Exploit
• 🔥 http://waraxe.us/advisory-39.html · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030844.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0376 · Security Note
• http://marc.info/?l=bugtraq&m=110557050700947&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18878 · Note
• http://securitytracker.com/id?1012868 · Note