PT-2009-6366 · Omilen+1 · Omilen Photo Gallery+1

Byalbayx · Published 2009-12-04 · Updated 2017-09-19 · CVE-2009-4202

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Omilen Photo Gallery (com omphotogallery) version Beta 0.5 for Joomla!

Description The issue allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the controller parameter to "index.php".

Recommendations For Omilen Photo Gallery (com omphotogallery) version Beta 0.5, consider restricting access to the "index.php" endpoint until a patch is available, and avoid using directory traversal sequences in the controller parameter to prevent exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2009-4202

Affected Products

Joomla!

Omilen Photo Gallery

References · 5

• 🔥 https://exploit-db.com/exploits/8870 · Exploit
• 🔥 http://exploit-db.com/exploits/8870 · Exploit
• 🔥 http://securityfocus.com/bid/35201 · Exploit
• http://vupen.com/english/advisories/2009/1494 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4202 · Security Note