Skip to content

CVE-2005-2258 PHP remote file inclusion vulnerability in photolist.inc.php in Squito Gallery 1.33 allows remote attackers to execute arbitrary code via the photoroot parameter.

HighCVSS 7.5 EPSS 3.2%
Published
Updated
Exploit status
No public exploit known

Description

PHP remote file inclusion vulnerability in photolist.inc.php in Squito Gallery 1.33 allows remote attackers to execute arbitrary code via the photoroot parameter.

Affected products

ProductAffected versionsFixed in
squitosoft squito gallery = 1.33 No fix listed

References

  • 16009 third-party-advisory vendor-advisory
  • 1014447 exploit vdb-entry
  • 14219 vdb-entry