Description
Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative via unspecified cookies. NOTE: some of these details are obtained from third party information.
References
- 32817 third-party-advisory
- gallery-cookie-security-bypass(46804) vdb-entry
- 32440 vdb-entry
- http://gallery.menalto.com/last_official_G1_releases
- 50089 vdb-entry