CVE-2006-4720

The CVE-2006-4720 issue affects mcGalleryPRO 2006, specifically the random2.php file. A PHP remote file inclusion vulnerability exists where an attacker can supply a URL in the path_to_folder parameter to execute arbitrary PHP code on the server. The vulnerability is tied to the random2.php path ...

PT-2006-5498 · Mcgallerypro · Mcgallery Pro

Name of the Vulnerable Software and Affected Versions: mcGalleryPRO 2006 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the path to folder parameter in the random2.php file. Recommendations: For mcGalleryPRO 2006, consider restricting access to the...