CVE-2007-2076 PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed...
MediumCVSS 6.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party researcher, but confirmed by the vendor, stating "this problem existed only briefly in v1.0."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| maian gallery | = 1.0 | No fix listed |
References
- 20070415 Re: phpMyChat-0.14.5 mailing-list
- 20070415 false: Maian Gallery v1.0 exploit mailing-list
- 34149 vdb-entry
- 20070414 Maian Gallery v1.0 mailing-list
- 20070414 Re: Maian Gallery v1.0 mailing-list
- maiangallery-pathtofolder-file-include(33692) vdb-entry