CVE

Id
8051  
CVE No.
CVE-2003-1227  
Status
Candidate  
Description
PHP remote file include vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on Windows or in Configuration mode on Unix, allows remote attackers to inject arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412. NOTE: this issue might be exploitable only during installation, or if the administrator has not run a security script after installation.  
Phase
Assigned (20050816)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
48653 8051 CVE-2003-1227 BUGTRAQ:20031011 Gallery 1.4 including file vulnerability  View
48654 8051 CVE-2003-1227 URL:http://www.securityfocus.com/archive/1/341044  View
48655 8051 CVE-2003-1227 BUGTRAQ:20031012 Re: Gallery 1.4 including file vulnerability  View
48656 8051 CVE-2003-1227 URL:http://www.securityfocus.com/archive/1/341098  View
48657 8051 CVE-2003-1227 BUGTRAQ:20031011 RE: Gallery 1.4 including file vulnerability  View
48658 8051 CVE-2003-1227 URL:http://www.securityfocus.com/archive/1/341094  View
48659 8051 CVE-2003-1227 BID:8814  View
48660 8051 CVE-2003-1227 URL:http://www.securityfocus.com/bid/8814  View
48661 8051 CVE-2003-1227 XF:gallery-indexphp-file-include(13419)  View

Related JVN