Description
Unspecified vulnerability in util.php in Gallery before 1.5.2-pl2 allows remote authenticated users with trick an owner into modifying stored album data and possibly executing arbitrary code via unspecified vectors involving a crafted link to a crafted file.
References
- 16533 vdb-entry
- 1015641 vdb-entry
- http://www.digitalarmaments.com/2006140293402395.html
- 20060216 Re: Digital Armaments Security Advisory 02.14.2006: Gallery web-based photo gallery remote file execution mailing-list
- 20060214 Digital Armaments Security Advisory 02.14.2006: Gallery web-based photo gallery remote file execution mailing-list
- http://gallery.menalto.com/gallery_1_5_2_pl2_security_release
- 22944 vdb-entry
- 18735 third-party-advisory
- 23256 vdb-entry
- gallery-util-file-include(24768) vdb-entry
- gallery-album-data-modification(24538) vdb-entry