Unscored CVE-2007-2076 EUVD-2007-2071GHSA-g5w4-p9fr-v4hr

PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL i…

Published Apr 18, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party researcher, but confirmed by the vendor, stating "this problem existed only briefly in v1.0."

References

maiangallery-pathtofolder-file-include(33692) vdb-entry
20070414 Re: Maian Gallery v1.0 mailing-list
20070415 Re: phpMyChat-0.14.5 mailing-list
20070415 false: Maian Gallery v1.0 mailing-list
20070414 Maian Gallery v1.0 mailing-list
34149 vdb-entry