CVE-2003-1227

PHP remote file include vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on Windows or in Configuration mode on Unix, allows remote attackers to inject arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412. NOTE: this issue might be exploitable only during installation, or if the administrator has not run a security script after installation.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

6.66% chance of exploitation in the next 30 days, 93th percentile

Published

2005-08-16

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/23238

References

• CVE Record
• NVD entry

Related

• CVE-2003-1219
• CVE-2003-1228
• CVE-2003-1216
• CVE-2003-1232
• CVE-2003-1213
• CVE-2003-1236