Secunia Advisory: SA10301
Release Date: 2003-11-27

Critical: Highly critical
Impact: System access
Where: From remote

Software: My_eGallery 3.x


Description:
A vulnerability has been reported in My_eGallery, which can be exploited by malicious people to compromise a vulnerable system.

The problem is that parameters used in include statements aren't properly verified. This can be exploited to include arbitrary code from external resources.

Versions prior to 3.1.1.g are vulnerable.

Solution:
Update to version 3.1.1.g:
http://lottasophie.sourceforge.n...x&req=viewdownload&cid=5

Reported by / credits:
Bojan Zdrnja

Original Advisory:
http://lottasophie.sourceforge.n...e=thread&order=0&thold=0


Source: Secunia

OS/2-eCS-ArcaOS General News

More in General  

OS/2-eCS-ArcaOS Software News

More in Software  

Latest Forum Posts

WarpStock and OS/2-eCS-ArcaOS Event News

More in Events  

Site News

More in Site News