CVE-2007-2068

EPSS 3.2%

Multiple PHP remote file inclusion vulnerabilities in the StoreFront mods for Gallery allow remote attackers to execute arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter to (1) mods/business_functions.php or (2) mods/ui_functions.php.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3749unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/34969 http://osvdb.org/34970 http://secunia.com/advisories/24890 https://exchange.xforce.ibmcloud.com/vulnerabilities/33701 https://www.exploit-db.com/exploits/3749 http://www.securityfocus.com/bid/23516 http://www.vupen.com/english/advisories/2007/1423