PT-2010-3737 · Jv2 · Jv2 Folder Gallery

Sn!Per.S!Te Hacker · Published 2010-06-01 · Updated 2017-08-17 · CVE-2010-2127

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions JV2 Folder Gallery version 3.1

Description A remote file inclusion issue in the gallery.php file of JV2 Folder Gallery allows remote attackers to execute arbitrary PHP code via a URL in the lang file parameter.

Recommendations For JV2 Folder Gallery version 3.1, consider restricting access to the gallery.php file or the lang file parameter to minimize the risk of exploitation until a patch is available.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2010-2127

Affected Products

Jv2 Folder Gallery

References · 6

• 🔥 http://securityfocus.com/bid/40339 · Exploit
• 🔥 http://packetstormsecurity.org/1005-exploits/jv2foldergallery-rfi.txt · Exploit
• 🔥 https://exploit-db.com/exploits/12688 · Exploit
• 🔥 http://exploit-db.com/exploits/12688 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-2127 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58807 · Note