Description
index.php in w00t Gallery 1.4.0 allows remote authenticated users with privileges for one installation to gain access to other installations on the same web server, aka "multi-gallery admin session spanning." NOTE: some of these details are obtained from third party information.
References
- http://sourceforge.net/project/shownotes.php?release_id=471109
- 21590 vdb-entry
- w00t-index-security-bypass(30886) vdb-entry
- 23383 third-party-advisory