Unscored CVE-2002-2123 EUVD-2002-2102GHSA-768p-q28g-4q5f

PHP remote file inclusion vulnerability in publish_xp_docs.php for Gallery 1.3.2 allows remote attackers to inject arbitrary PHP code by sp…

Published Aug 16, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in publish_xp_docs.php for Gallery 1.3.2 allows remote attackers to inject arbitrary PHP code by specifying a URL to an init.php file in the GALLERY_BASEDIR parameter.

References

gallery-winxppublishing-command-execution(10943) vdb-entry
20021228 Gallery v1.3.2 allows remote exploit (fixed in 1.3.3) mailing-list
6489 vdb-entry