Description
The URL rewrite module in Menalto Gallery before 2.2.4 allows attackers to include and execute arbitrary local files via unknown vectors related to the admin controller.
References
- http://gallery.menalto.com/gallery_2.2.4_released
- GLSA-200802-04 vendor-advisory
- 28898 third-party-advisory
- 41674 vdb-entry
- http://bugs.gentoo.org/show_bug.cgi?id=203217