CVE-2008-6315

PHP remote file inclusion vulnerability in conf/core/common-tpl-vars.php in PHPmyGallery 1.0 beta2 allows remote attackers to execute arbitrary PHP code via a URL in the confdir parameter, a different issue than CVE-2008-6316...

CVE-2008-6317: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in conf/php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attackers to include and execute arbitrary local files via a .. dot dot in the conflang parameter, a different issue than CVE-2008-6318. NOTE: this might be the same issue as CVE-2008-631...

CVE-2008-6318: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in conf/php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter, a different vector than CVE-2008-6317...

PHPmyGallery 1.5beta (common-tpl-vars.php) LFI/RFI Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== PHPmyGallery 1.5beta common-tpl-vars.php LFI/RFI Vulnerabilities ================================================================== Phpmygallery-1.5beta common-tpl-vars.php...