CVE-2007-5224 inc/exif.inc.php in Original Photo Gallery 0.11.2 and earlier allows remote attackers to execute arbitrary programs via the exif_prog parameter, which is specified in an exec function call.
MediumCVSS 6.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
inc/exif.inc.php in Original Photo Gallery 0.11.2 and earlier allows remote attackers to execute arbitrary programs via the exif_prog parameter, which is specified in an exec function call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jimmac original photo gallery | <= 0.11.2 | No fix listed |
References
- 41390 vdb-entry
- 27029 third-party-advisory
- 3187 third-party-advisory
- 20071002 Original Photo Gallery Remote Command Execution mailing-list
- www.ush.it
- www.ush.it exploit
- ADV-2007-3341 vdb-entry
- original-exifinc-command-execution(36916) vdb-entry