Release Date: 2003-11-27
Critical: Highly critical
Impact: System access
Where: From remote
Software: My_eGallery 3.x
Description:
A vulnerability has been reported in My_eGallery, which can be exploited by malicious people to compromise a vulnerable system.
The problem is that parameters used in include statements aren't properly verified. This can be exploited to include arbitrary code from external resources.
Versions prior to 3.1.1.g are vulnerable.
Solution:
Update to version 3.1.1.g:
http://lottasophie.sourceforge.n...x&req=viewdownload&cid=5
Reported by / credits:
Bojan Zdrnja
Original Advisory:
http://lottasophie.sourceforge.n...e=thread&order=0&thold=0
Source: Secunia