StoreFront for Gallery *GALLERY_BASEDIR* File Inclusion Vulnerabilities

Posted on Wednesday, April 18, 2007 @ 00:29:44 PDT in Security
by raven



SECUNIA ADVISORY ID: SA24890

VERIFY ADVISORY: http://secunia.com/advisories/24890/

CRITICAL: Highly critical

IMPACT: System access

WHERE: >From remote

SOFTWARE: StoreFront for Gallery - http://secunia.com/product/13957/

DESCRIPTION: Alkomandoz Hacker has reported a vulnerability in StoreFront for Gallery, which can be exploited by malicious people to compromise a vulnerable system.

Input passed to the "GALLERY_BASEDIR" parameter in mods/business_functions.php and mods/ui_functions.php is not properly verified before being used to include files. This can be exploited to include arbitrary files from local or external resources. Successful exploitation requires that "register_globals" is enabled.

SOLUTION: Edit the source code to ensure that input is properly verified.

PROVIDED AND/OR DISCOVERED BY: Alkomandoz Hacker

ORIGINAL ADVISORY: http://milw0rm.com/exploits/3749
 
 
click Related        click Share
 
News ©

Site Info v2.2.2

Last SeenLast Seen
Server TrafficServer Traffic
  • Total: 369,586,494
  • Today: 101,063
Server InfoServer Info
  • Oct 18, 2018
  • 10:47 pm PDT
 
 

Daily Inspiration