PT-2008-2436 · Freephpgallery · Freephpgallery

Mhz91 · Published 2008-02-19 · Updated 2017-09-29 · CVE-2008-0818

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions freePHPgallery version 0.6

Description The issue concerns multiple directory traversal vulnerabilities. These vulnerabilities allow remote attackers to include and execute arbitrary local files. The attack can be performed by including a .. (dot dot) in the lang cookie to specific API endpoints: "comment.php", "index.php", and "show.php".

Recommendations For freePHPgallery version 0.6, consider restricting access to the "comment.php", "index.php", and "show.php" endpoints until a patch is available. As a temporary workaround, validate and sanitize the lang cookie to prevent directory traversal attacks.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-0818

Affected Products

Freephpgallery

References · 6

• 🔥 https://exploit-db.com/exploits/5124 · Exploit
• http://secunia.com/advisories/28972 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0818 · Security Note
• http://sourceforge.net/forum/forum.php?forum_id=785794 · Note
• http://securityfocus.com/bid/27806 · Note
• http://vupen.com/english/advisories/2008/0589 · Note