PT-2005-2943 · Mcgallery · Mcgallery

D_Bug · Published 2005-06-15 · Updated 2016-10-18 · CVE-2005-1997

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions McGallery version 1.1

Description The issue allows remote attackers to connect to arbitrary databases or gain sensitive information by triggering an error. This is achieved via a modified host parameter in the show.php file.

Recommendations For McGallery version 1.1, consider restricting access to the show.php file until a patch is available, and avoid using modified host parameters to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-1997

Affected Products

Mcgallery

References · 5

• http://secunia.com/advisories/15727 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1997 · Security Note
• http://marc.info/?l=bugtraq&m=111885559100231&w=2 · Note
• http://osvdb.org/17344 · Note
• http://securitytracker.com/id?1014215 · Note