CVE

Id
10550  
CVE No.
CVE-2004-2124  
Status
Candidate  
Description
The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_POST_VARS variable and conduct a PHP remote file inclusion attack via the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412.  
Phase
Assigned (20050527)  
Votes
None (candidate not yet proposed)  
Comments