CVE-2003-1227

2005-08-1604:00:00

CWE-94

mitre

web.nvd.nist.gov

cve-2003-1227

php

remote file include

gallery 1.4

security vulnerability

nvd

windows

unix

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.192

Percentile

96.4%

JSON

PHP remote file include vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on Windows or in Configuration mode on Unix, allows remote attackers to inject arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412. NOTE: this issue might be exploitable only during installation, or if the administrator has not run a security script after installation.

Affected configurations

Nvd

Node

gallery_projectgalleryMatch1.4

gallery_projectgalleryMatch1.4_pl1

VendorProductVersionCPE
gallery_projectgallery1.4cpe:2.3:a:gallery_project:gallery:1.4:*:*:*:*:*:*:*
gallery_projectgallery1.4_pl1cpe:2.3:a:gallery_project:gallery:1.4_pl1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gallery_project	gallery	1.4	cpe:2.3:a:gallery_project:gallery:1.4:::::::*
gallery_project	gallery	1.4_pl1	cpe:2.3:a:gallery_project:gallery:1.4_pl1:::::::*