Immunity Canvas: MYGALLERY_REMOTE

Name| mygalleryremote ---|--- CVE| CVE-2007-2426 Exploit Pack| CANVAS Description| WordPress Plugin MyGallery Remote Include Notes| CVE Name: CVE-2007-2426 VENDOR: MyGallery CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2426 Repeatability: Infinite CVSS: 7.5...

CVE-2007-2426

The myGallery plugin for WordPress (version 1.4b4 and earlier) contains a Remote File Inclusion (RFI) vulnerability in the myfunctions/mygallerybrowser.php script. The root cause is a failure to sanitize the myPath parameter, which allows unauthenticated remote attackers to include and execute ar...

CVE-2007-2426

PHP remote file inclusion vulnerability in myfunctions/mygallerybrowser.php in the myGallery 1.4b4 and earlier plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the myPath parameter...