CVE
- Id
- 10550
- CVE No.
- CVE-2004-2124
- Status
- Candidate
- Description
- The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_POST_VARS variable and conduct a PHP remote file inclusion attack via the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412.
- Phase
- Assigned (20050527)
- Votes
- None (candidate not yet proposed)
- Comments